Marks & Spencer has confirmed that personal information belonging to members of staff was stolen during the cyber attack that struck the retailer last month.

According to reports first published in The Telegraph, M&S management informed employees that the breach included full names and email addresses.

The latest update follows a warning last week to customers that their data may have also been compromised as a result of the same incident.

Subscribe to Grocery Gazette for free

Sign up here to get the latest grocery and food news each morning

Personal information thought to have been accessed includes names, addresses, and online order histories. However, the high street retailer reassured the public that there is no evidence of passwords, payment details, or sensitive financial data having been accessed.

Nonetheless, M&S has advised both staff and customers to remain vigilant against phishing scams and suspicious information.

In April, it was reported that the attack had been linked to hacking group Scattered Spider – a group connected to high-profile attacks on retailers and financial institutions.

It is understood, the ransomware attack could see M&S receive up to £100m in an insurance payout.