Harrods has admitted that nearly half a million shoppers were impacted by its data breach earlier this month.
The luxury department store said it “received communications from the threat actor and will not be engaging with them”.
Harrods did not give any further information on what the hackers had communicated to the business.
Information including customers’ names and contact details were taken after one of the retailer’s third-party provider systems was compromised, the company said.
Harrods said that none of its own internal systems had been breached.
However, affected shoppers have been assured that impacted data was “limited to basic personal identifiers,” according to a spokesperson, and payment details or account passwords were not impacted by the data breach.
Related Story
Harrods said: “The third party has confirmed this is an isolated incident which has been contained, and we are working closely with them to ensure that all appropriate actions are being taken. We have notified all relevant authorities.
“No Harrods system has been compromised and it is important to note that the data was taken from a third-party provider.”
Harrods insisted that the breach was unrelated to attempts to gain unauthorised access to some of its systems earlier this year.
The business fell victim to a cyber-attack in May, following attacks at M&S and Co-op.
A Harrods spokesman said: “Our focus remains on informing and supporting our customers. We have informed all relevant authorities and will continue to co-operate with them.”
Click here to sign up to Retail Gazette‘s free daily email newsletter
