It’s not clear how many individuals’ data was stolen during the hack. When reached by TechCrunch, Marks & Spencer spokesperson Alicia Sanctuary would not say how many individuals are affected and referred TechCrunch to its online statement. Marks & Spencer had 9.4 million online customers as of 30 March 2024, per its most recent annual report .

Marks & Spencer, the iconic U.K. clothing and food retailer that’s seen its online operation shuttered for more than three weeks following a cyberattack, on Tuesday said for the first time that customer data was taken.

The company suspended online orders for weeks after the breach, which may have exposed contact details and birth dates.