Retailer WH Smith revealed that threat actors have breached its infrastructure and had access to the data of about 12,500 current and former employees.
The company immediately launched an investigation into the incident with the help of specialist support services, it also notified the relevant authorities.
The company is notifying all affected employees and announced it has put measures in place to support them.
“WH Smith PLC has been the target of a cyber security incident which has resulted in illegal access to some company data, including current and former employee data. Upon becoming aware of the incident, we immediately launched an investigation, engaged specialist support services and implemented our incident response plans, which included notifying the relevant authorities.” reads a notice filed with the London Stock Exchange’s Regulatory News Service. “There has been no impact on the trading activities of the Group.”
The company pointed out that its customer data were not impacted.
WH Smith has more than 1,700 stores that sell books, stationery, magazines, newspapers, entertainment products and confectionery.
The notice doesn’t provide details about the attack, however, the impact reported in the notice is consistent with a ransomware attack.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, Moshen Dragon)
Fintech firm Figure confirmed a data breach after hackers used social engineering to trick an…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in BeyondTrust RS and…
A new alleged Russia-linked APT group targeted Ukrainian defense, government, and energy groups, with CANFAIL…
A new threat actor, UAT-9921, uses the modular VoidLink framework to target technology and financial…
Attackers quickly targeted BeyondTrust flaw CVE-2026-1731 after a PoC was released, enabling unauthenticated remote code…
Google says nation-state actors used Gemini AI for reconnaissance and attack support in cyber operations.…
This website uses cookies.