Harrods Says Customers’ Data Stolen in IT Breach

Luxury department store Harrods has warned customers their personal data may have been taken in an IT systems breach, Adam Hale reported for BBC News.

A loosely linked group of hackers who claimed responsibility for that cyberattack also claimed to be behind high-profile attacks on Marks & Spencer and the Co-op earlier this year

It said information such as names and contact details of some online customers was taken from the systems of a third-party provider. Harrods described the breach in an email sent to customers as an “isolated incident,” adding that no passwords or payment details were taken.

In a statement it said: “The third party has confirmed this is an isolated incident which has been contained, and we are working closely with them to ensure that all appropriate actions are being taken. We have notified all relevant authorities.”

A spokesman for the store said that its own system had not been compromised and that the breach is not connected to a cyberattack in May, when it restricted internet access across its sites as a precautionary measure following an attempt to gain unauthorized access.

A loosely linked group of hackers who claimed responsibility for that cyberattack also claimed to be behind high-profile attacks on Marks & Spencer and the Co-op earlier this year.

In July, the National Crime Agency arrested four people in connection with the hacks.