Share

Marks & Spencer shuts down website over data gaffe

M&S temporarily suspended its website last night while it investigated the “technical difficulties”, a spokeswoman said.

Advertisement

The site take-down came after customers complained that they were able to see the details of other customers after logging into the website. However, a few on social media claimed they were able to be see full payment details.

Marks & Spencer has apologised for leaking customers’ personal data after a glitch on its website resulted in people seeing each other’s details when they logged in.

“Interesting, I just created an M&S account to register my new Sparks card and out of a sudden I’m logged in to someone else’s account!”

A spokeswoman for Marks & Spencer said: ‘There were no financial details compromised at all.

After customers notified the company via its Facebook and Twitter accounts, Marks & Spencer pulled its website offline in order to “resolve the issue and quickly restore service for our customers”. “We apologise to customers for any inconvenience caused”, the spokesperson said.

A spokesperson said the website was suspended between 6.30pm and 9pm while the breach was investigated. It’s another data breach! M&S this is in breach of privacy and data security.

Home broadband provider Talk Talk had previously claimed names, addresses, phone numbers and credit card and account numbers were stolen in the attack – believed to be one of the biggest in British history.

It was notably not the same customer’s details that shoppers were shown.

Advertisement

The Home broadband provider has since started to inform its customers about the process in place for those who were victims of the cyber attack.

Marks & Spencer suspends website after customers see other shoppers' details