Overview

• Harrods said a compromised external provider led to the theft of some e-commerce customers’ names and contact details, with no Harrods systems breached.
• Affected customers were notified, the incident was contained, and the retailer reported it to the relevant authorities.
• The store said passwords and payment information were not taken, and it is working with the vendor on remedial steps.
• Harrods declined to identify the provider, citing an ongoing investigation, and said this incident is unrelated to an attempted intrusion reported in May.
• Police previously arrested four suspects in July over attacks affecting Harrods, Marks & Spencer and the Co-op, as other UK firms including Jaguar Land Rover have reported recent cyber disruptions.