Harrods, a luxury department store in London, recently experienced a cyberattack attempt, prompting it to restrict internet access across its sites. Despite this, the store’s flagship location and online sales remained operational, and customers were not advised to take any additional precautions. The company did not specify the extent of the network impact but emphasized its IT team’s proactive response to secure systems. Harrods reassured customers that all its stores, including the Knightsbridge, H beauty stores, and airport locations, stayed open.
The attack on Harrods follows a series of cyber incidents impacting major UK retailers like the Co-op and Marks & Spencer (M&S). M&S has been severely affected, with online orders halted and physical store shelves empty. The Co-op also shut down parts of its IT systems after similar cyber intrusion attempts, with staff being ordered to keep cameras on during remote meetings to prevent further breaches.
Experts suggest these incidents could either be connected or stem from a common supplier vulnerability.
The National Cyber Security Centre (NCSC) has been actively supporting the affected retailers, aiming to understand the nature of these cyber threats and offer guidance. Richard Horne, the NCSC’s CEO, warned that these attacks should serve as a wake-up call for retailers, given their growing vulnerability to cyber threats. Cody Barrow, cybersecurity expert, advised that retailers must assume they are prime targets for cybercriminals due to the wealth of customer data they hold.
M&S’s attack is believed to have been a ransomware attack, with a group named “DragonForce” being identified as the culprit.
Security experts stress the increasing difficulty large organizations face in securing their supply chains from such threats. It remains unclear if the cyber attacks on Harrods, the Co-op, and M&S are connected, though the recent spike in incidents suggests a trend of escalating cyber risks in the retail sector.
Reference: