
UK high street giant WH Smith has revealed it has suffered a “cybersecurity incident” in which hackers gained unauthorized access to its systems and stole data, including information relating to current and former employees. bottom.
The statement filed with the London Stock Exchange doesn’t mention the word ‘ransomware’, but I don’t think anyone would be surprised if that happened.
The retailer, which has hundreds of stores across the UK, said an investigation into the incident was ongoing and that it was taking security “very seriously”.
Have any companies announced they’ve been hacked *without* claiming they’re taking security seriously? I don’t think so…

WH Smith said it has notified all affected employees and has notified the relevant authorities.
The customer database and WH Smith’s online presence will not be affected, the company said.
In time, we’ll learn more about what happened and the nature of the data stolen by the WH Smith attackers. Whether that will be revealed through news released by WH Smith himself, or by exposing ransomware details of what his gang has done on the dark web remains to be seen…
Last year, Funky Pigeon, an online greeting card business, one of WH Smith’s subsidiaries, suffered its own cybersecurity incident after hackers gained access to its systems.
Did you find this article interesting? Follow Graham Cluley on Twitter Or visit Mastodon to read more exclusive content we post.