Latest news with #JamesHadley
Daily Record
4 days ago
- Business
- Daily Record
All the retailers hit by recent cyber attacks as two more become latest victims
Marks and Spencers was the first company to get hit back at Easter weekend and now more brands are joining the list. Cyber attacks have taken yet another hit at high-profile retailers as two more well-known brands have become the latest victims to this online crime. Luxury jeweller Cartier and fashion brand North Face have become the latest victims of cyber criminal reign. It has been reported that both Cartier and North Face have revealed that customer data was breached - including email addresses and names. However, the firms did also emphasise that no financial information was taken. The cases of malware hacks has been increasing over the past few months since Marks and Spencers was attacked back in April. As a result, the company had to temporarily shut down their online shopping, which is still yet to reopen more than a month after the attack. This was followed by Co-op being hacked and having to cancel their delivery service. Adidas, Victoria's Secret and Harrods have also joined the list of notable brands that have been victims of cyber criminals. North Face sent an email out to their customers recently informing them that it discovered a "small-scale" attack back in April this year. It went on to say that the hackers targeted the company by using a technique called "credential stuffing", which is when crooks try to use usernames and passwords from another data breach in hopes that customers have reused the same password. It was also noted that some of the hackers may have been able to get access to some shoppers' shipping addresses and purchase history. Those who were affected have been urged to change their passwords. Luxury brand Cartier also sent out an email which informed shoppers that "an unauthorized party gained temporary access to our system" and that the crooks "obtained limited client information". They also said that no passwords or card details were accessed. The firm added: "We contained the issue and have further enhanced the protection of our systems and data." James Hadley, founder of cyber-security company Immersive, has said that cyber attacks are the "harsh reality" of the retail industry. As luxury and high street brands are "overflowing with customer information", he says they are becoming more of an "easy target" for cyber crooks. M&S has still yet to recover properly from the attack in April, with owners saying that their online services are likely to be disrupted until July. Additionally, the company had estimated that this inconvenience will end up costing the company £300million. Within the breach, hackers managed to gain access to a variety of customer personal data, including names, email addresses, postal addresses and dates of birth. Since the incident, Scottish law firm Thompsons Solicitors have filed a multi-million pound class action suit against the company. This was followed by the Co-op and Harrods being forced to shut down their IT systems and restrict their internet access to try and ward off further attacks. On May 2, a Co-op spokesperson revealed ongoing "sustained malicious attempts by hackers to access" their systems. It also said it was "a highly complex situation" following reports that the same cybercriminals had taken responsibility for both breaches. At the same time, Harrods restricted access to their sites following an attempt to gain access to their systems. However, the company was able to keep its stores open and continue their online sales. At the time, a statement from Harrods said: "We recently experienced attempts to gain unauthorised access to some of our systems. "Our seasoned IT security team immediately took proactive steps to keep systems safe and as a result we have restricted internet access at our sites today. "Currently all sites including our Knightsbridge store, H beauty stores and airport stores remain open to welcome customers. Customers can also continue to shop via Join the Daily Record WhatsApp community! Get the latest news sent straight to your messages by joining our WhatsApp community today. You'll receive daily updates on breaking news as well as the top headlines across Scotland. No one will be able to see who is signed up and no one can send messages except the Daily Record team. All you have to do is click here if you're on mobile, select 'Join Community' and you're in! If you're on a desktop, simply scan the QR code above with your phone and click 'Join Community'. We also treat our community members to special offers, promotions, and adverts from us and our partners. If you don't like our community, you can check out any time you like. To leave our community click on the name at the top of your screen and choose 'exit group'. If you're curious, you can read our Privacy Notice. Later on in May, sportswear brand Adidas also disclosed that hackers had been able to steal customers' personal information, which "mainly consisted" of the contact information of people who had been in touch with the help desk. Again, the brand said that passwords and card details, along with other payment data, had not been compromised. On its website, Adidas said: "We remain fully committed to protecting the privacy and security of our consumers, and sincerely regret any inconvenience or concern caused by this incident." Lingerie firm Victoria's Secret was also a victim of a cyber attack, which saw them take down their US website and replace it with a customer notice saying: "Working around the clock to fully restore operations". Some in-store services were also taken down at the time. However, the company's UK website seemed to be unaffected.
Daily Mirror
6 days ago
- Business
- Daily Mirror
Two more major retailers hit by cyber attacks with customer information stolen
Luxury watchmaker and jeweller Cartier and outdoor retailer The North Face confirmed this week that they had become the latest retailers to be hit Two more major high street retailers have been hit by cyber attacks and both confirm customer data was compromised, as the number of malware hacks at retailers continues to climb. Luxury watchmaker and jeweller Cartier and outdoor retailer The North Face confirmed this week that they had become the latest retailers to be hit. In an email to customers, the upmarket watch retailer said that "an unauthorised party gained temporary access" to its system and "obtained limited client information". This included names and email addresses. However, the Swiss-owned company confirmed that the data accessed did not include passwords or banking information. Cartier did not confirm exactly when the cyber attack took place. In the email, it said: "We contained the issue and have further enhanced the protection of our systems and data." It added that it had boosted its cybersecurity measures and reported the incident to the relevant authorities. Get the best deals and tips from Mirror Money Fashion brand The North Face admitted that it had experienced a "small-scale" attack in April this year. The retailer said the stolen information could include shipping addresses, purchase history, email addresses, names, phone numbers and dates of birth. Again, it told customers that financial information was not accessed. The retailer told its customers that the hackers had used a technique called "credential stuffing". This is where attackers try usernames and passwords stolen from another data breach, in the hope that customers have reused the same passwords across multiple accounts. It urged all customers to change passwords to their accounts. Sign up to Mirror Money's newsletter for the latest advice and news From universal credit to furlough, employment rights, travel updates and emergency financial aid - we've got all of the big financial stories you need to know about right now. Sign up to our Mirror Money newsletter here. These attacks are part of a series of recent cybersecurity incidents that have affected high-profile retailers, including Marks & Spencer, Co-op, Adidas, Harrods, and Victoria's Secret. M&S and the Co-op had their operations severely disrupted when they were targeted in April. M&S said the cyber attack will cost it over £300million, and seven weeks after it occurred, the retailer is still unable to take online orders. It says its services will likely continue to be disrupted until July. At the time, the upmarket supermarket and retailer confirmed that the stolen information could include people's names, home addresses, phone numbers, or email addresses, as well as dates of birth and online order history. Retailers are often targets of cyber attacks, due to the amount of data they can hold on a customer. James Hadley, founder of the cybersecurity company Immersive, told the BBC that the attacks are a "harsh reality" for the industry. He noted that retailers were "overflowing with customer information," and are "easy targets for attackers".
