Overview

• The retailer says only basic personal identifiers were taken, such as names and contact information, not passwords or payment details.
• Harrods states its own systems were not breached and attributes the theft to an external e-commerce provider.
• The provider told Harrods the incident is isolated and contained, and the two are working together on remedial steps.
• Affected customers have been contacted, and relevant authorities have been notified.
• The company says the event is unrelated to an attempted network intrusion in May, which preceded July arrests in wider retail cyber cases.