Harrods Confirms Customer Data Stolen in IT Breach
Luxury department store Harrods has disclosed that customers' personal data may have been compromised in an IT systems breach, according to a statement released on Friday evening. The incident is attributed to a third-party provider's system being hacked, with information such as names and contact details potentially stolen.
"We are working closely with the affected third party to ensure all necessary actions are taken," Harrods said in a statement. "We have notified all relevant authorities." No passwords or payment details were accessed during the breach, according to the company.
The incident is described by Harrods as an isolated event, contained within the third-party provider's system. The store emphasized that its own systems had not been compromised and that this breach was unrelated to a cyber attack in May, which prompted Harrods to restrict internet access across its sites as a precautionary measure.
"We have robust security measures in place to protect our customers' data," said a Harrods spokesperson. "We take the security of our customers' information very seriously and are committed to ensuring their trust."
The breach raises concerns about the vulnerability of customer data, particularly when handled by third-party providers. Experts note that such incidents highlight the need for enhanced cybersecurity measures and greater transparency in data handling practices.
"This incident serves as a reminder that even with robust security measures in place, breaches can still occur," said Dr. Rachel Kim, a cybersecurity expert at the University of London. "It's essential for companies to prioritize customer data protection and maintain open communication channels in case of incidents."
The National Crime Agency (NCA) has been notified of the breach, as per Harrods' statement. The NCA has not commented on the incident.
In related news, a loosely linked group of hackers claimed responsibility for high-profile attacks on Marks & Spencer and the Co-op earlier this year. However, Harrods emphasized that its breach was unrelated to these incidents.
As investigations into the breach continue, Harrods will work closely with authorities and third-party providers to ensure all necessary actions are taken to protect customer data. The incident serves as a reminder of the importance of robust cybersecurity measures in today's digital landscape.
Background:
Harrods is one of London's most iconic department stores, known for its luxury goods and high-end services. With a long history dating back to 1849, Harrods has established itself as a leader in the retail industry. The store has faced several cyber attacks in recent years, including the May incident that prompted internet access restrictions across its sites.
Implications:
The breach highlights concerns about customer data protection and the need for enhanced cybersecurity measures. Experts emphasize the importance of transparency in data handling practices and the need for companies to prioritize customer data security.
Next Developments:
As investigations into the breach continue, Harrods will work closely with authorities and third-party providers to ensure all necessary actions are taken to protect customer data. The incident serves as a reminder of the importance of robust cybersecurity measures in today's digital landscape.
*Reporting by Bbc.*