Retailer suspends website in security breach
Sparks fly as M&S customers access other shoppers’ accounts
Marks & Spencer was forced last night to reassure customers of the safety of its new loyalty card after some were able to access other shoppers’ accounts.
Among those who took to social media, one described it as “madness” and another said she could see all of another woman’s banking details, including her personal address.
Marks & Spencer confirmed it was suffering “technical difficulties” and was working to resolve the issue. It said it had not been the victim of a hacker.
A spokesperson said: “We’re currently experiencing some technical difficulties and have temporarily suspended our website whilst we investigate this thoroughly. We’re working hard to fix this and will update as soon as we can.”
On Facebook, customer Konstantinos Vlassis posted: “Interesting, I just created an M&S account to register my new Sparks card and…I’m logged into someone else’s account! M&S this is in breach of privacy and data security. I can see personal addresses, past orders and info of another account holder and I assume they can see mine.”
Debbie Dilks said she thought it was “appalling” that she could see other people’s details. She said: “I have just found the name address email address date of birth and mobile and land line number of a lady I have never met. This is appalling.”
David Collier from Bournemouth said last night that his girlfriend had created an account and was ‘presented with five other people’s account details’.
Online security expert David McClelland urged customers to ensure they had separate passwords for each account.