Superdrug has apparently verified 300 compromised accounts that have fallen victim to hackers in a recent cyber-attack. 

According to reports, the hackers made contact claiming they had data of 20,000 customers, in a bid to hold the firm to ransom. Some of the data stolen allegedly includes names, addresses and points balances, whilst customer's financial information is not believed to be at risk. Superdrug claims that its systems are secure and that their customer details have been obtained through breaches of other sites. 

The high street brand is only the latest victim following a year of disruptive large-scale cyber-attacks. In 2017 the NHS was hit by ransomware 'WannaCry' which affected at least 16 health service organisations, locking them out of devices and demanded payments between $300 and $600 to restore access. FedEx was also impacted by the virus, which cost them a staggering $300million. 

Unfortunately, cyber-attacks of this scale are not unheard of. With much of our private information being stored online or on our computers, it is becoming increasingly difficult to keep sensitive data out of the hands of opportunistic scammers. Although large scale attacks are hard to control yourself, here are some top tips for protecting your own private information online: 

• Create complex passwords. Some sites already make it mandatory to create complex passwords, for example, including numbers and a mixture of upper and lower-case characters. Try using a password that can't be guessed using basic information such as your pet's name or your date of birth.
• Be safe when online shopping or surfing. Make sure that the sites you visit start with 'https' rather than just 'http' and has a padlock icon in the URL field. This means that the website is secure and is encrypted to help stop your data being intercepted.
• Be cautious what you share on social media. Some of the most basic information about your identity can cause great harm. Even on social media sites a scammer can attain information such as your date of birth, address and e-mail address. Try to make social media accounts private where possible.
• Think before you click. Some viral software relies on online surfers clicking on links that promise free trials, discount products or online quizzes. These links, which can often be sent directly via e-mail, can allow access to your online private data or in some cases your entire device. Luckily, e-mail accounts automatically file away most 'spam' emails that included these dangerous links so you don't have to! If something seems too good to be true - avoid clicking.
• Keep your anti-virus software up-to-date. Protective software works at its best when its updates. This is because cyber-crime is an ever-changing threat that requires quick action. If your software isn't up to date, it can't do its job properly. Take the time to do a quick update when prompted by your security provider.