The Independent: Cyber experts issue urgent advice to M&S customers after data breach
The Independent reported on the wave of guidance issued by cybersecurity professionals following confirmation from Marks & Spencer that a cyber attack had resulted in the theft of personal customer data. Read the preview below or view it online.
+++
Staying vigilant has never been more critical.
Regarding “Cyber experts issue urgent advice to M&S customers after data breach” (The Independent, May 13): As the fallout from the M&S cyber attack continues, experts are urging customers to be on high alert for scams, phishing attempts, and fraud. Although payment data and passwords were not compromised, the exposure of names, email addresses, dates of birth, and postal details presents serious risks.
Cybersecurity leaders are warning that such data is likely to be used in social engineering campaigns, with fraudsters posing as trusted organisations to trick victims into sharing sensitive information. Sam Kirkman, Director of Services for EMEA, at NetSPI stressed the risk of identity fraud, advising customers to monitor their credit scores and be alert to impersonation tactics exploiting leaked personal data to establish false trust.
Other industry voices echoed the need for caution. Customers are being urged to avoid clicking links in suspicious emails, not to send personal data via email or phone, and to verify messages directly through official channels. The use of multi-factor authentication, strong passwords, and even passkeys has been recommended to improve account security.
With online orders still paused, the attack’s impact is ongoing, but the risks to customers may only just be beginning.
You can read the full article here.
Explore More News
Canvas breach puts global education cyber risk in focus
ITBrief interviewed NetSPI's Field CISO, Nabil Hannan, for a May 24, 2026 article about a major data breach in Instructure's Canvas learning management system disrupting final exams at universities.
Microsoft is working on a patch for ‘YellowKey’ attack on BitLocker, offers temporary fix
CSO Online interviewed NetSPI's VP of Research, Karl Fosaaen, for a May 20, 2026 article about how Microsoft is working on a patch for a zero-day vulnerability dubbed "YellowKey" (CVE-2026-45585).
AI-powered Continuous Pentesting
NetSPI® launches AI-powered Continuous Pentesting to help organizations validate and reduce risk through their Human-led, AI-accelerated platform that supports continuous penetration testing and agentic MCP integrations.