The High Street brand was hit by a cyber attack three weeks ago.
M&S have confirmed customer information was stolen in a recent cyber attack.
The High Street store came under attack three weeks ago.
Now, they have revealed that some customer data, including contact details and date of births, has been stolen.
They reassured customers that useable payment or card details, and account passwords were not among information that was taken.
However, they have advised customers to update their passwords for ‘peace of mind’.
The brand are still attempting to recover from the attack, with services running abnormally and online ordering suspended.
M&S chief executive, Stuart Machin, shared that the company would write to customers on this week, informing them that ‘unfortunately, some personal customer information has been taken.’
He continued: “Importantly, there is no evidence that the information has been shared.”
M&S operations director, Jayne Wall, wrote in an email to customers: “You do not need to take any action, but you might receive emails, calls or texts claiming to be from M&S when they are not, so do be cautious.
“Remember that we will never contact you and ask you to provide us with personal account information, like usernames, and we will never ask you to give us your password,” she added.
LISTEN: You Must Be Jokin’ podcast – listen to the latest episode now!
