Business27 September, 20251 min read
Harrods Warns Customers of Data Theft in Third-Party Cyberattack
This article is an automated aggregation of coverage from news outlets. Our editorials offer in-depth analysis curated by the NewsCord team.
Customer names and contact details were stolen in a third-party provider IT breach. No payment information or passwords were compromised in the cyberattack.
8 outlets told this the same way.
Harrods Data Breach Notice
Harrods, the renowned luxury department store, has recently informed its customers about a data breach involving a third-party IT provider. This breach resulted in the exposure of basic personal information such as names and contact details, but crucially, no passwords or payment information were compromised.
“Harrods emphasized that its own systems were not affected and that the incident is isolated and contained.”
Harrods has assured its customers that its own systems were not affected by this incident, which is considered isolated and contained. The company has taken steps to notify affected customers and relevant authorities to address the situation promptly.
Harrods Cybersecurity Incidents
This recent breach is separate from a previous cyberattack on Harrods earlier this year. In May, Harrods had to restrict internet access as a precautionary measure following attempted unauthorized access to its systems.
The current incident underscores the ongoing cybersecurity challenges faced by retailers, as highlighted by the involvement of third-party providers. Harrods is actively working with the third-party provider and authorities to mitigate any potential risks and prevent future occurrences.
Retail Cybersecurity Challenges
The breach has highlighted the growing cybersecurity threats faced by retailers, especially those involving third-party providers. Harrods is not the only retailer affected; other major UK retailers such as Marks & Spencer and the Co-op have also been targeted by cyberattacks. These events have raised concerns about the urgent need for stronger cybersecurity measures across the retail industry to safeguard customer data and preserve trust.
“Earlier in the year, Marks & Spencer (M&S) suffered a major cyber attack that disrupted services for six weeks, resulting in stolen customer information and a £300 million estimated cost.”
Harrods Data Breach Response
In response to the breach, Harrods has been proactive in its communication with customers and authorities. The company has assured that it is working closely with the third-party provider to address the issue and prevent future breaches. This incident has also led to increased scrutiny of third-party IT providers, as they are often seen as weak links in the cybersecurity chain.