M&S customer data hacked! Find out if you're affected, what was stolen & 5 urgent steps to protect yourself immediately.


Newsletter

wave

M&S Cyber Attack: Your Data Could Be Stolen – Here’s What To Do NOW

Retail giant Marks & Spencer (M&S) has been hit by a major cyber attack, exposing sensitive customer data. Hackers may have stolen names, addresses, payment details, and even loyalty points. Are you at risk? Here’s everything you need to know – and exactly how to lock down your accounts before it’s too late.

🔴 M&S Cyber Attack: What We Know So Far

The breach was confirmed this week, but hackers may have had access for weeks or even months. Here’s the scary truth:

  • What was stolen? Names, emails, phone numbers, home addresses, and partial payment card details

  • Who’s affected? Online shoppers, Sparks loyalty members, and in-store card users

  • How did it happen? A "sophisticated third-party attack" on M&S’s customer database

💡 Critical: Even if you haven’t shopped recently, your old data could still be exposed!

🚨 5 Urgent Steps To Protect Yourself (Do TODAY!)

Don’t wait for M&S to contact you – take action now:

1️⃣ Check If Your Data Was Leaked

  • Use Have I Been Pwned? (free tool) to scan your email

  • Look for unusual login alerts from M&S or other accounts

2️⃣ Freeze Your Credit Immediately

  • Contact Experian, Equifax & TransUnion to block fraud attempts

  • Prevents criminals from taking loans in your name

3️⃣ Change ALL Reused Passwords

  • Start with email, banking & M&S accounts

  • Use random 12+ character passwords (no pet names!)

4️⃣ Enable 2FA on EVERY Account

  • SMS codes aren’t safe – use Authenticator apps instead

  • M&S customers: Activate 2FA in account settings NOW

5️⃣ Watch for These SCAM Warning Signs

  • Fake "M&S refund" emails (never click links!)

  • Calls claiming to be "M&S security team" (they’ll NEVER ask for passwords)

⚠️ Warning: Fraud attempts will spike in the next 30 days – stay hyper-alert!

💳 Was Your Card Details Stolen? Here’s EXACTLY What To Do

If you’ve ever saved payment info with M&S:

  • Call your bank – request new card numbers ASAP

  • Check statements for small "test" charges (£1-£5)

  • Disable saved cards in M&S account settings

🔥 Pro Tip: Use virtual cards (like Revolut) for online shopping – limits exposure

🤔 Is M&S Giving Compensation? The Shocking Truth

Right now:

  • No automatic payouts announced

  • You MUST report fraud to get money back

  • Class action lawsuit brewing (register interest via law firms)

💬 Furious? Complain to M&S AND the ICO (Information Commissioner’s Office)

📱 How To Spot FAKE M&S Security Emails (Scam Alert!)

Cybercriminals are exploiting panic with:

  • "Urgent account verification" links (NEVER click!)

  • Fake "£50 goodwill gesture" offers

  • "Your order is stuck" phishing texts

🔍 Spot the Difference: Real M&S emails WON’T demand immediate action or passwords

🔐 The Bottom Line: Don’t Wait – Act NOW

This breach could haunt victims for years as data circulates on dark web markets. Tonight:
✅ Scan your email for leaks
✅ Freeze your credit
✅ Cancel saved payment cards

Share this guide with family – especially elderly relatives who shop at M&S!

FAQ

M&S says they’ll email affected customers, but check Have I Been Pwned for leaks now.

Only if you reused passwords. Change them immediately if your M&S login matches other accounts.

Not yet – but disable saved cards and enable 2FA first. Monitor for unusual activity.

Online? Use guest checkout & virtual cards. In-store? Cash is safest short-term.

You can sue for distress/damages if financial harm occurs. Document everything.

NO! Scammers are calling pretending to be M&S. Hang up & report to Action Fraud.

At least 12 months – stolen data often resurfaces later. Set up free credit alerts.

Yes, but use the app (not email links) and check statements for point theft.

Search Anything...!