Over 1,000 join legal action against M&S after major customer data breach, lawyers say

At-a-glance

• Cyber attack on M&S involved ‘sophisticated impersonation’, chairman tells MPs

• Thompsons Solicitors launching class action against M&S after April’s cyberattack exposed customer data

• Names, emails, addresses, and birth dates stolen — raising concerns over identity fraud and phishing scams

• M&S admits fault, estimating the breach could cost the company around £300 million

• Customers urged to beware of fake emails offering gifts; experts stress verifying sender details before clicking links

• M&S hopes to fully restore digital operations by August, following shutdowns to contain the breach