Data Breaches

British Department Store Harrods Warns Customers That Some Personal Details Taken in Data Breach

Four people were arrested in July on suspicion of their involvement in cyberattacks against Harrods and two other leading British retail chains, Marks & Spencer and the Co-op and Harrods.

Harrods, the luxury British department store, has warned some customers that their personal data may have been taken in a breach of its online systems.

The company said late Friday that some names and contact details of its online customers were taken after one of its third-party provider systems was compromised.

“We have informed affected customers that the impacted personal data is limited to basic personal identifiers including name and contact details, but does not include account passwords or payment details,” it said in a statement.

It added that incident was “isolated” and has been contained, without providing more details.

Harrods said that the data breach wasn’t connected to an incident in May, when it restricted internet access across its sites as a precautionary measure following an attempt to gain unauthorized access to its systems.

Four people were arrested in July on suspicion of their involvement in cyberattacks against Harrods and two other leading British retail chains, Marks & Spencer and the Co-op and Harrods. The suspects were bailed pending further inquiries.

Advertisement. Scroll to continue reading.

Several other cyberattacks have targeted high-profile British businesses in recent months.

Last week, Jaguar Land Rover, Britain’s biggest automaker, said that its production lines will remain shut down until at least Oct. 1, after a cyberattack in August.

On Friday, the BBC and other British media reported that hackers stole information about thousands of children from Kido, a London nursery chain, and posted some of the children’s photos and details on the darknet.

The Metropolitan Police force said that inquiries about “a ransomware attack on a London-based organization” were ongoing and no arrests have been made.

Related: Ransomware Attack Cost Keytronic Over $17 Million

Related: Cyberattack Cost Oil Giant Halliburton $35 Million

Related: Ransomware Hits Critical Infrastructure Hard, Costs Adding Up

Related Content

Data Breaches

The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.

Data Breaches

Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.

Data Breaches

A leaked SquareML access key could have been used to access a database containing personal and health information.

Data Breaches

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

Data Breaches

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

Data Breaches

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

Data Breaches

The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth.

Data Breaches

Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version