How to protect yourself from the M&S, Harrods, and Co-op cyberattacks
Anti-ID theft tools are available, and you should use them
Here at Tom’s Guide our expert editors are committed to bringing you the best news, reviews and guides to help you stay informed and ahead of the curve!
You are now subscribed
Your newsletter sign-up was successful
Want to add more newsletters?
Daily (Mon-Sun)
Tom's Guide Daily
Sign up to get the latest updates on all of your favorite content! From cutting-edge tech news and the hottest streaming buzz to unbeatable deals on the best products and in-depth reviews, we’ve got you covered.
Weekly on Thursday
Tom's AI Guide
Be AI savvy with your weekly newsletter summing up all the biggest AI news you need to know. Plus, analysis from our AI editor and tips on how to use the latest AI tools!
Weekly on Friday
Tom's iGuide
Unlock the vast world of Apple news straight to your inbox. With coverage on everything from exciting product launches to essential software updates, this is your go-to source for the latest updates on all the best Apple content.
Weekly on Monday
Tom's Streaming Guide
Our weekly newsletter is expertly crafted to immerse you in the world of streaming. Stay updated on the latest releases and our top recommendations across your favorite streaming platforms.
Join the club
Get full access to premium articles, exclusive features and a growing list of member rewards.
The recent cyberattacks on UK retailers have shown how no one is 100% safe from hackers and highlighted the pressing need for effective cybersecurity protections.
Tools like the best VPNs are great at protecting your online privacy, but they aren't always the most useful tools when dealing with a data breach.
M&S, Harrods, and the Co-op have all suffered data breaches, with the Co-op admitting a "significant number" of customers have had their data accessed. However, the retailer has said this doesn't include financial information or passwords.
Data breaches can be scary – especially when they aren't your fault – and, understandably, you may be worried about potential repercussions.
Immediate responses should be to change your passwords and secure your accounts. Use one of the best password managers to generate unique and complex passwords.
You should also be on the lookout for scam or phishing attempts. These can take the form of suspicious text messages or emails, fake shops, or even romance scams.
But don't panic, there are tools available to help protect against data breaches, ID theft, and scams. ID theft protection services are available – and some of our top-rated VPN providers come bundled with them.
Surfshark's Alternative ID
We rate Surfshark as the best cheap VPN, with plans starting at $1.99 per month, and it's also the fastest VPN we've tested.
Surfshark has an effective antivirus, but the Alternative ID feature is what we'll be highlighting here.
Alt ID allows you to generate a fake online persona, protecting your true identity as a result. You can generate a name, age, gender, address, and email – perfect for signing up to newsletters, websites, or anything else you'd rather not share your information with.
Alt ID is free with all Surfshark VPN plans and you can delete and create a persona as many times as you like.
Surfshark: our top-rated cheap VPN
Surfshark is a great cheap VPN and is the fastest we've tested. It doesn't quite have as many features as other providers, but Alt ID is a unique and handy tool for hiding your personal data online, and comes free with every Surfshark plan. The 2-year deal works out at $1.99 per month ($53.73 plus tax up front). You get 3 extra months of protection for free and there's a 30-day money-back guarantee.
While there's nothing stopping you from signing up to membership cards or buying items online, you might want to check the terms of service of the company you're signing up with – just to double check you aren't breaking any rules by using Alt ID.
What you can't generate is bank details. So if you're required to enter this information, it has to be your genuine details and they won't match your generated ID.
Only Australia, Brazil, Denmark, Germany, Portugal, and the U.S. can be used as your Alt ID location, which may be a problem when signing up for services outside these regions like the UK.
Despite a few drawbacks, Alt ID is still an excellent free tool for hiding your personal details online, protecting yourself from hackers, and reducing spam. If this data is breached or compromised, you won't be harmed and you can simply delete the alias and create a new one.
Surfshark also offers Alternative Number. This allows you to generate a dummy phone number, linked to your Alt ID, that can receive calls and text messages. Alt Number is a paid add-on for all Surfshark plans.
NordVPN's NordProtect
NordVPN offers a complete cybersecurity package in the form of NordProtect. This collection of ID protection features is only available for U.S. subscribers and is included in the NordVPN Prime plan or can be purchased as a standalone product.
There's identity theft insurance of up to $1 million, and $100,000 in cyber extortion insurance, plus a dedicated ID theft case manager. Alongside this, the dark web will be monitored for appearances of your personal details and there's credit assistance.
At $6.99 per month ($188.73 plus tax up front), NordVPN Prime is NordVPN's most expensive offering, but if you're happy to spend the money it's worth it.
NordPrime: total cybersecurity protection
NordVPN is our top-rated VPN and NordPrime is its most expensive offering. It offers total cybersecurity protection and you get all the benefits of NordVPN and Threat Protection Pro, as well as NordProtect. You can protect and monitor your data and access up to $1 million in cyber insurance but it's only available to U.S. users. The 2-year plan comes to $6.99 per month ($188.73 plus tax up front). There's an extra 3 months of protection included for free and a 30-day money-back guarantee.
This level of protection is not available to users outside the U.S., but NordVPN has just introduced ID theft recovery protection to its NordVPN Ultimate plan for those in the UK.
Up to £5,000 is available to reimburse any losses incurred, as well as scam protection but not much else. For the price (£5.09 per month) it falls a little short, especially when compared to the U.S. offering. But if you're happy to pay, it's better than nothing.
Although it doesn't directly protect against ID theft, NordVPN's Threat Protection Pro is the best VPN malware protection out there and is very effective at identifying scam or phishing links that may arise from a data breach. Threat Protection Pro, as well as the NordPass password manager, is included in all NordVPN plans except NordVPN Basic.
ExpressVPN's Identity Defender
ExpressVPN also includes a form of identity theft protection, Identity Defender. It's similar to NordProtect and only available to U.S. ExpressVPN subscribers. Up to $1 million of cyber insurance is on offer and Credit Scanner helps protect your credit score.
ID Alerts monitors the web for your data and the data removal service requests the deletion of this data from data brokers.
Identity Defender is included in the 2-year ExpressVPN plan for American subscribers only and, working out at $4.99 per month ($139.72 up front), it's cheaper than NordVPN Prime. But unfortunately, this is of no help to those in the UK looking to protect their data.
ExpressVPN: the best choice for beginners
ExpressVPN is simple and easy to use, making it a great choice for beginners. ExpressVPN's Identity Defender is its data and theft protection feature, with a data removal service, cyber insurance, and credit monitoring on offer. Everything is included in ExpressVPN's 2-year deal, which equates to $4.99 per month ($139.72 up front). Right now there's an extra 4 months of protection thrown in for free, as well as the usual 30-day money-back guarantee. But it's worth remembering that Identity Defender is only available in the U.S.
We test and review VPN services in the context of legal recreational uses. For example: 1. Accessing a service from another country (subject to the terms and conditions of that service). 2. Protecting your online security and strengthening your online privacy when abroad. We do not support or condone the illegal or malicious use of VPN services. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.

George is a Staff Writer at Tom's Guide, covering VPN, privacy, and cybersecurity news. He is especially interested in digital rights and censorship, and its interplay with politics. Outside of work, George is passionate about music, Star Wars, and Karate.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.



