The high-street retailer claims that its website, customer accounts, and customer databases are on distinct, unaffected systems, and an investigation into the incident has been initiated.
WH Smith reported being the subject of a cyber attack in which hackers gained access to company data.
The high street retailer added hackers have also been able to access current and former employee information.
It said the hack has not impacted its trading activities and emphasized its website, customer accounts, and customer databases are on unaffected separate systems.
WH Smith said: “Upon becoming aware of the incident, we promptly launched an investigation, engaged specialist support services. And implemented our incident response plans, which included notifying the relevant authorities.”
“WH Smith takes the issue of cyber security very seriously, and investigations into the incident are ongoing,” the statement continued.
“We are notifying all affected colleagues and have set measures in place to support them.”
The incident coincides with a spate of cyberattacks in recent months, with Royal Mail’s international postal service being severely disrupted after hackers targeted the organization.
In January, the retailer JD Sports also issued a warning that approximately 10 million customers’ addresses. Phone numbers, and e-mail addresses may have been compromised in a breach.