Harrods, the renowned British department store, has issued a warning to its customers regarding a data breach. The incident, which affected the company’s online systems, was traced back to a compromised system belonging to one of its third-party providers. The breach exposed the names and contact details of a number of e-commerce customers, prompting Harrods to launch an investigation. The company is collaborating with cybersecurity experts to fortify its systems and mitigate any additional risks to customer data.
In a public statement, Harrods acknowledged the breach. The company disclosed that it was alerted by a third-party provider about the unauthorized access to some Harrods e-commerce customer data. The compromised information was limited to basic personal identifiers such as names and contact details, and the company confirmed that sensitive data like account passwords or payment information remained secure. This reassurance is crucial for customers concerned about the safety of their financial information.
The third-party provider has assured Harrods that the incident was isolated and has been contained. Harrods stated that it is working closely with the provider to ensure all necessary actions have been taken. The company has also informed all relevant authorities about the breach, a standard procedure for such security incidents. This demonstrates Harrods’ commitment to transparency and its adherence to regulatory requirements.
Harrods confirmed that the security breach was mitigated, emphasizing that no financial data was compromised. This is a significant point of relief for affected customers, as the primary concern in any data breach is the potential for financial fraud. By quickly containing the threat and verifying the integrity of financial data, Harrods has taken an important step in managing the fallout and rebuilding customer trust.
It is important to note that this security incident is not related to the cyberattack that Harrods experienced in May, when threat actors attempted to gain unauthorized access to its systems, leading the company to temporarily restrict internet access at its sites. The National Crime Agency (NCA) arrested four individuals in July as part of an investigation into a series of attacks targeting multiple British retailers, including Harrods.
Reference: