Security scare for M&S customers

Marks & Spencer's online customers are among the millions of internet users who could be besieged by spam emails after a massive security breach.

Computer hackers stole a database of personal details from Epsilon, a Dallas-based online marketing company whose clients include the high street chain.

M&S emailed shoppers at risk yesterday, warning they "may receive spam email" but stressing that the hackers have only got hold of names and email addresses, rather than financial details.

The data theft a week ago is believed to be one of the largest in history. Epsilon is used by a large number of firms to send out marketing emails, with customers of about 50 businesses thought to have had their information exposed.

Benefit, the cosmetics and skincare group owned by LVMH, was affected. Benefit is no longer a client of Epsilon, suggesting the latter held on to customer details after the relationship ended.

Benefit warned on Monday: "We were just informed by a former email vendor that the database with our customers' names and email addresses has been compromised by an unauthorised person."

Other victims include TiVo, hotels chain Marriott International, Barclays' US credit card arm, JPMorgan Chase and Citigroup.

Some of the companies have warned hackers could try to gain access to bank account details.
An investigation is under way at Epsilon. Its statement says: "A rigorous assessment determined that no other personal identifiable information associated with those names was at risk."