Marks & Spencer has revealed that some personal data was stolen in the recent cyber attack which has continued to halt its online orders.
The High Street giant said personal information including telephone numbers, home address and dates of birth were leaked, but added that data theft did not include card details or account passwords.
M&S was hit by the cyber attack three weeks ago and is still struggling to get services back to normal. The ongoing problems are costing the company £43million a week in lost sales.
In a statement to markets yesterday, the retailer said: "We are writing to customers informing them that due to the sophisticated nature of the incident, some of their personal customer data has been taken.
Importantly, the data does not include useable payment or card details, which we do not hold on our systems, and it does not include any account passwords. There is no evidence that this data has been shared.
"We have said to customers that there is no need to take any action. For extra peace of mind, they will be prompted to reset their password the next time they visit or log onto their M&S account and we have shared information on how to stay safe online.
"We remain grateful for the support that our customers, colleagues, partners and suppliers have shown us during this time."
FTSE 100
The UK's flagship share index, the FTSE 100, was up three points at 8,594 shortly after opening this morning.
Brent crude oil futures were down 0.48% at $66.31 a barrel.
Companies reporting today
Burberry* - Full Year Results
Compass Group* - Half Year Results
Experian* - Full Year Results
Imperial Brands* - Half Year Results
Keller - Q1 Trading Statement
Spirax Group - Q1 Trading Statement
TP ICAP Group - Q1 Trading Statement
TUI* - Q2 Results