Overview

• Harrods says a compromised vendor system exposed some e‑commerce customers’ names and contact details.
• The retailer reports no passwords or payment data were affected and says its own systems were not breached.
• The third party described the incident as isolated and contained, and relevant authorities have been notified.
• Harrods says this issue is unconnected to May’s attempted intrusions, when it restricted internet access as a precaution.
• Four suspects arrested in July over attacks on Harrods, Marks & Spencer and the Co‑op have been bailed pending further inquiries, according to the National Crime Agency.