Luxury department store Harrods has informed customers of a potential data breach involving their personal information. It has been reported that names and contact details of some online customers may have been accessed through the systems of a third-party provider. In an email to customers, Harrods referred to the incident as “isolated,” stating that no passwords or payment information were compromised.
The company issued a statement indicating that the third-party provider has assured them that the situation is contained and that they are collaborating closely with them to implement necessary measures. Harrods has also informed the relevant authorities about the incident.
According to a spokesperson, Harrods’ own systems were not breached, and this incident is unrelated to a previous cyber event in May, during which the store restricted internet access as a precaution against unauthorized access attempts. During that time, a loosely associated group of hackers claimed responsibility, having also been linked to similar attacks on other retailers like Marks & Spencer and the Co-op.
In connection with those earlier cyber threats, four individuals were arrested in July by the National Crime Agency. Among those detained were a 20-year-old woman and three males aged between 17 and 19, all of whom have since been released on bail. A separate group has also claimed responsibility for an August attack that disrupted global production at Jaguar Land Rover.
Richard Horne, chief executive of the National Cyber Security Centre, emphasized the tangible impacts of cyberattacks, stating that attackers are refining their techniques and have broad targets. He urged all organizations to take appropriate steps to safeguard their systems and protect their customers.
Source: https://www.bbc.com/news/articles/c8d70d912e6o?at_medium=RSS&at_campaign=rss