Harrods customers’ details stolen in IT systems breach | UK News

Harrods has warned its e-commerce customers that their personal data may have been taken in an IT systems breach.

Information like customers’ names and contact details was taken after one of Harrods’ third-party provider systems was compromised, the luxury London department store said.

Affected customers have been informed and reassured that the impacted data is “limited to basic personal identifiers”, a spokesperson said.

Account passwords or payment details were not affected in the breach.

“The third party has confirmed this is an isolated incident which has been contained, and we are working closely with them to ensure that all appropriate actions are being taken. We have notified all relevant authorities,” Harrods added.

“No Harrods system has been compromised and it is important to note that the data was taken from a third-party provider.”

This comes four months after the department store restricted internet access as a precautionary measure due to “attempts to gain unauthorised access” to some of its systems.

Friday’s breach is “unconnected” to the attempts in May, the spokesman said.

Two men aged 19, a 17-year-old boy and a 20-year-old woman were arrested in July over their suspected involvement in cyber attacks on Harrods, Marks & Spencer, and the Co-op.

Read more from Sky News:
Jaguar Land Rover shutdown extended after cyber attack
Teenagers charged over TfL cyber attack costing millions

They were arrested on suspicion of blackmail, money laundering, offences linked ot the Computer Misuse Act, and participating in the activities of an organised crime group, the National Crime Agency said.

All four have been bailed pending further inquiries.

It comes as hackers claim to have stolen pictures, names and addresses of thousands of children in a cyber attack on a nursery chain in London.

The group, calling itself Radiant, has released personal information about children and staff at the Kido nursery chain on the dark web and demanded a ransom from the company.

Radiant told Sky News on Friday it intends to imminently release the profiles of more children and employees.