WHSmith refutes data loss claim

WHSmith is attempting to play down a potential data breach after customers of its subscriptions services suddenly started receiving dozens of emails containing other people’s phone numbers, names and email addresses.
The issue was raised by customers who had filled out the “contact us” section of the company’s subscriptions website.
One user complained on the firm’s Facebook page that she had received 65 emails “starting at 00.12 this morning”, while another bemoaned the fact that she had received “over 20 emails so far from your contact us forms with customers emails and phone numbers”.
The company confirmed that there has been an issue with its subscription service, but appears a little confused as to what constitutes a data breach, simply describing it as “a bug, not a data breach”, even though customer details were exposed.
A spokesman maintained the issue has affected “fewer than 40 customers”, despite the large numbers complaining online. A greater number of users were believed to be on the receiving end of the spam emails.
A statement read: “I-subscribe (which manages WHSmith’s magazine subscriptions) is contacting the customers concerned to apologise for this administrative processing error. We can confirm that this issue has not impacted or compromised any customer passwords or payment details.”