UK's Marks and Spencer said that "some personal customer information" was stolen during the cyber attack which targeted the retailer in April 2025. The stolen data does not include usable payment or card details, while evidence of the data being shared is unknown. The retailer blamed the 'sophisticated nature' of the attack and said it would inform its customers.