The High Street behemoth stated that while online order records may also be among the personal data stolen, no card numbers, account passwords, or usable payment information were included.
Three weeks after the cyberattack, M&S is still having trouble returning to normal operations, and online orders are still not being processed.
Customers will be asked to reset their account passwords “for extra peace of mind,” according to the store.
Stuart Machin, the CEO of M&S, stated that the company was writing to customers to let them know that “some personal customer information has been taken.”
