LONDON — Luxury British department store Harrods has warned some of its online customers that their personal data may have been compromised in a cyberattack involving a third-party provider.
In a statement issued late Friday, Harrods said the breach exposed “basic personal identifiers including name and contact details,” but stressed that no account passwords or payment information were affected.
The company described the incident as “isolated” and said it had been contained, though it did not provide additional details.
Harrods added that the breach was unrelated to a May incident in which it restricted internet access across its sites following an attempted intrusion.
The warning comes months after four suspects were arrested in July on suspicion of involvement in cyberattacks against Harrods and other major British retailers, including Marks & Spencer and the Co-op. They were released on bail pending further investigation.
Several other U.K. businesses have recently faced cyberattacks. Jaguar Land Rover said last week its production lines would remain shut until at least Oct. 1 after an August cyberattack, while hackers also targeted London nursery chain Kido, stealing data and posting children’s photos and personal details on the darknet.
The Metropolitan Police confirmed investigations are ongoing into “a ransomware attack on a London-based organization,” with no arrests made so far. — Agencies