@Alwyn
You and others were right! M&S in the UK has admitted that customer Data WAS stolen. See here:
Shoppers will be asked to reset their passwords as crippling hack remains unresolved after three weeks
www.telegraph.co.uk
If this Link can't be opened (especially outside the UK), then here are the key points:
"Marks & Spencer has admitted that customer data was stolen in
a cyber attack that has crippled the retailer.
The high street giant said it would be writing to customers on Tuesday to inform them that some of their
personal data had been taken more than three weeks after it first confirmed the incident.
Stuart Machin, chief executive, said: “As we continue to manage the current cyber incident, we have written to customers today to let them know that unfortunately, some personal customer information has been taken.
“Importantly, there is no evidence that the information has been shared and
it does not include useable card or payment details, or account passwords, so
there is no need for customers to take any action.”
Despite the latter comment about no need to take action, some are saying that you should change your password - this is anecdotal, not "official".
Ian
Just received email from M&S. This is the only real important bit:
"Unfortunately, the nature of the incident means that some personal customer data has been taken, but there is
no evidence that it has been shared. The personal data could include contact details, date of birth and online order history. However, importantly,
the data does not include useable card or payment details, and it also does not include any account passwords. For more detail, see our FAQs."
Passwords
apparently not affected
Ian