Slashdot: Marks and Spencer Confirms Hackers Stole Customers’ Personal Data; Cyber Insurance Payout To Be Worth Up To $133 Million

May 14, 2025

—

Source URL: https://it.slashdot.org/story/25/05/14/1050202/marks-and-spencer-confirms-hackers-stole-customers-personal-data-cyber-insurance-payout-to-be-worth-up-to-133-million?utm_source=rss1.0mainlinkanon&utm_medium=feed
Source: Slashdot
Title: Marks and Spencer Confirms Hackers Stole Customers’ Personal Data; Cyber Insurance Payout To Be Worth Up To $133 Million

Feedly Summary:

AI Summary and Description: Yes

Summary: A significant data breach at U.K. retailer Marks & Spencer has resulted in the theft of customer personal information, including sensitive data. The retailer is taking steps to mitigate the impact by resetting passwords and is expected to claim substantial financial losses from cyber insurance.

Detailed Description: The reported cyberattack on Marks & Spencer highlights critical vulnerabilities within retail cybersecurity and underscores the importance of robust information security practices. The breach involves sensitive customer data, which could lead to serious privacy implications. Key points include:

– **Type of Data Compromised**: The breached data includes:
– Customer names
– Dates of birth
– Home and email addresses
– Phone numbers
– Household information
– Online order histories

– **Response Measures**: In response to the breach, Marks & Spencer is:
– Resetting online account passwords for affected customers to protect further access to compromised accounts.

– **Financial Implications**: The retailer anticipates claiming up to $133 million in damages from cyber insurance policies as a result of the incident:
– Allianz is cited as the leading insurer involved, expected to handle significant initial claims.
– Cyber insurance is becoming increasingly essential for organizations facing rampant cyber threats, particularly in the retail sector.

– **Regulatory and Compliance Concerns**: This incident raises questions around compliance with data protection regulations, emphasizing the need for:
– Enhanced governance frameworks to protect customer data.
– Proactive measures in information security to prevent future breaches.

– **Industry Impact**: Events like these serve as a wake-up call for businesses to reassess their security infrastructure and incident response strategies, especially in sectors that handle large volumes of personal information.

This situation underscores the relevance of cybersecurity, data privacy, and the necessity for organizations to invest in adequate security measures and insurance to mitigate financial risks associated with cyberattacks.

1 10 2 3 4 5 a access account Act addresses AI and anti art as attack attacks Bi breach breaches business by C CERN CI CIA co compliance compromised compromised accounts concerns core critical Customer customer data cyber cyber insurance cyber threat cyber threats cyberattack Cyberattacks cybersecurit Cybersecurity D data data breach data compromise data privacy Data Protection data protection regulations de DoT e email email addresses event exp financial financial implications financial loss financial losses financial risks for framework frameworks future g Go governance governance framework governance frameworks H hack hacker hackers high Highlight HR http HTTPS implications in incident incident response incident response strategies industry industry impact information information security information security practices infrastructure insurance insurance policies ite k Key l large led Li Link M measures N no non o of on one organization organizations ory out over passwords personal data personal information point policies pre privacy privacy implications proactive proactive measures protection Q question R Raise rate RCE Regulation regulations regulatory report response response strategies retail retail cybersecurity retail sector Risk risks Ro RoT s sec sector security security infrastructure security measure security measures security practices sensitive data Sig SoC source SSE SSO strategies T taking the theft threat threats to Tor TP type under up US use V vents vulnerabilities Wi x