Which? comments on the news that some customer data has been taken in the M&S cyber incident

Lisa Barber, Which? Tech Editor, said:  

"While it's reassuring that card and account details don't appear to have been taken in the M&S cyber incident, it's concerning that criminals have gained access to information that could be used for identity fraud. 

"It's always a good idea to change your password as soon as possible if there's been a security breach and to ensure your new password is unique from any other online accounts.  

"M&S customers should also be on the lookout for scammers using the data breach as an opportunity to contact them impersonating legitimate organisations. You should treat any contact out of the blue with suspicion and be especially wary of anyone who asks you to verify account details or payment information. If you are in any doubt about whether a call, email or message is genuine, don't give any personal details and contact the company directly to check if it's really them."

-ENDS-