M&S says customer data stolen in cyber attack

Marks & Spencer has revealed that the contact details and date of births of some customers has been stolen in the recent cyber attack which continues to disrupt its services.

The High Street giant said the personal information taken also included online order histories, but added the data theft did not include useable payment or card details, or any account passwords.

M&S was hit by the cyber attack some three weeks ago and is still struggling to get services back to normal, with online orders still suspended.

The retailer said customers would be prompted to reset passwords for accounts "for extra peace of mind".

Stuart Machin, chief executive of M&S, said the company was writing to customers on Tuesday to inform them that "unfortunately, some personal customer information has been taken".

"Importantly, there is not evidence that the information has been shared," he added.

This breaking news story is being updated and more details will be published shortly. Please refresh the page for the fullest version.

You can receive Breaking News on a smartphone or tablet via the BBC News App. You can also follow @BBCBreaking on X to get the latest alerts.