Marks & Spencer shuts down website due to technical glitch displaying customer personal details

Retailer says sorry after technical problem allowed customers to temporarily see others’ account details

Marks and Spencer has apologised for a data breach that forced it to suspend its website for two hours after customers were able to view other people’s personal details when logging into their accounts online.

The retailer blamed a technical issue, which affected 800 customers, and said it acted quickly to resolve the problem. It stressed that it was not hacked by a third party and that no one’s financial details were compromised.

The company said that it was writing to every customer affected to “apologise and to assure them that their financial details are safe”. Its statement came after several shoppers called on M&S to provide reassurance that their details would not be misused.

_______________________________________________________________________

It is not clear what the customer count of 800 refers to. Log In will have a transaction count and log but do thM&S IT staff know whose data these customers actually saw? Financial data may be secure but identity data may not be

CLICK to See original Guardian news story