M&S has told its workers that some of their personal data was stolen during its cyber attack in April.
Sources explained that M&S bosses had warned their staff members that they believed full names and email addresses had been stolen under the attack, according to The Telegraph.
The update follows the food and fashion giant reporting that customer data had been stolen as part of the cyber attack earlier this week. The retailer warned shoppers to watch out for scam calls and emails following the news.
However, M&S assured customers that the stolen data did not include payment details, card information, or account passwords, and that there was no evidence that the data had been shared.
-
Related Story
-
M&S began suffering from its cyber attack at the end of April, with shoppers left unable to use contactless payments or click-and-collect services over the Bank holiday weekend.
On 29 April, it was reported that hacking group Scattered Spider had been named in connection with the ongoing attack.
Earlier this week, The Financial Times reported that the M&S insurance pay out following the attack could be worth up to £100m, according to people familiar with the matter.
Click here to sign up to Retail Gazette‘s free daily email newsletter
