M&S faces multimillion-pound lawsuit over cyber attack data leak
M&S has been hit with a multimillion pound lawsuit following the theft of shopper data during its cyber attack.

M&S has been hit with a multimillion pound lawsuit following the theft of shopper data during its cyber attack.
The food and fashion giant confirmed last week that hackers had stolen shopper data, such as dates of birth, contact details, and online order histories.
However, it assured customers that the stolen data did not include payment details, card information, or account passwords, and there was no evidence that the data had been shared.
Thompsons Solicitors is now launching a class action claim against M&S for exposing shoppers to the threat of scams by not protecting their data.
Speaking to The Sunday Mail, senior partner Patrick McGuire said the solicitors had been “inundated by Scots M&S clients who have been caught up in this online heist and are contacting Thompsons”.
“I think this will be the biggest data theft case we have ever been involved in,” he added.
The update comes as M&S CEO Stuart Machin is set to face a significant pay reduction of up to £1.1m following the cyber attack.
The ongoing cyber attack, which was disclosed on April 22, has driven a 14% drop in M&S’s share price, translating to a loss of approximately £831,000 from Machin’s performance share plan and £233,000 from a deferred bonus, both of which are set to pay out in July.
Click here to sign up to Retail Gazette‘s free daily email newsletter