Harrods has confirmed that hackers have stolen personal data from its online customers in a fresh IT security breach.
The luxury department store said details such as names and contact information were accessed via a third-party provider. Harrods insisted that no payment details or passwords were compromised and described the incident as “isolated” and “contained”.
In an email sent to shoppers on Friday evening, the retailer reassured customers that its own systems had not been directly hacked, and that the issue was unrelated to a previous attempted cyber attack in May.
A spokesperson said: “The third party has confirmed this is an isolated incident which has been contained, and we are working closely with them to ensure all appropriate actions are taken. We have notified all relevant authorities.”
The attack comes amid a wave of high-profile cyber incidents hitting major UK brands this year. Marks & Spencer, the Co-op, and Jaguar Land Rover have all suffered hacks that disrupted operations and caused multimillion-pound losses. Four suspects, aged between 17 and 20, were arrested by the National Crime Agency over the summer in connection with some of these breaches.
Cyber experts warn that incidents like the Harrods breach highlight the growing risks for consumers. Richard Horne, chief executive of the National Cyber Security Centre, said criminals were “refining their techniques” to cause maximum disruption. “They don’t care who they hit or how much damage is caused,” he warned.
Harrods stressed that shoppers can continue using its services safely but advised customers to remain vigilant.
