[ad_1]
Harrods has warned its e-commerce customers that their personal data may have been taken in an IT systems breach.
Information like customers’ names and contact details was taken after one of Harrods’ third-party provider systems was compromised, the luxury London department store said.
Affected customers have been informed and reassured that the impacted data is “limited to basic personal identifiers”, a spokesperson said.
Account passwords or payment details were not affected in the breach.
“The third party has confirmed this is an isolated incident which has been contained, and we are working closely with them to ensure that all appropriate actions are being taken. We have notified all relevant authorities,” Harrods added.
“No Harrods system has been compromised and it is important to note that the data was taken from a third-party provider.”
This comes four months after the department store restricted internet access as a precautionary measure due to “attempts to gain unauthorised access” to some of its systems.
Friday’s breach is “unconnected” to the attempts in May, the spokesman said.
Two men aged 19, a 17-year-old boy and a 20-year-old woman were arrested in July over their suspected involvement in cyber attacks on Harrods, Marks & Spencer, and the Co-op.
Read more from Sky News:
Jaguar Land Rover shutdown extended after cyber attack
Teenagers charged over TfL cyber attack costing millions
They were arrested on suspicion of blackmail, money laundering, offences linked ot the Computer Misuse Act, and participating in the activities of an organised crime group, the National Crime Agency said.
All four have been bailed pending further inquiries.
[ad_2]
