The Independent reported on the wave of guidance issued by cybersecurity professionals following confirmation from Marks & Spencer that a cyber attack had resulted in the theft of personal customer data. Read the preview below or view it online.

+++

Staying vigilant has never been more critical.

Regarding “Cyber experts issue urgent advice to M&S customers after data breach” (The Independent, May 13): As the fallout from the M&S cyber attack continues, experts are urging customers to be on high alert for scams, phishing attempts, and fraud. Although payment data and passwords were not compromised, the exposure of names, email addresses, dates of birth, and postal details presents serious risks.

Cybersecurity leaders are warning that such data is likely to be used in social engineering campaigns, with fraudsters posing as trusted organisations to trick victims into sharing sensitive information. Sam Kirkman, Director of Services for EMEA, at NetSPI stressed the risk of identity fraud, advising customers to monitor their credit scores and be alert to impersonation tactics exploiting leaked personal data to establish false trust.

Other industry voices echoed the need for caution. Customers are being urged to avoid clicking links in suspicious emails, not to send personal data via email or phone, and to verify messages directly through official channels. The use of multi-factor authentication, strong passwords, and even passkeys has been recommended to improve account security.

With online orders still paused, the attack’s impact is ongoing, but the risks to customers may only just be beginning.

You can read the full article here.