IC-457282-L1L7
- Date 16 December 2025
- Category Action we have taken
- Outcome Information not held
Request for documentation on the 2008 Marks & Spencer data breach involving theft of unencrypted devices storing employee data, including details of discovery, ICO reporting, contractor name, location, and related devices.
Also seeks information on ICO fines, stolen data exposure, and encryption software adopted post-incident.