British Department Store Harrods Warns Customers That Some Personal Details Taken in Data Breach

"The company said late Friday that some names and contact details of its online customers were taken after one of its third-party provider systems was compromised. "We have informed affected customers that the impacted personal data is limited to basic personal identifiers including name and contact details, but does not include account passwords or payment details," it said in a statement."

"Harrods said that the data breach wasn't connected to an incident in May, when it restricted internet access across its sites as a precautionary measure following an attempt to gain unauthorized access to its systems. Four people were arrested in July on suspicion of their involvement in cyberattacks against Harrods and two other leading British retail chains, Marks & Spencer and the Co-op and Harrods. The suspects were bailed pending further inquiries."

Harrods warned some customers that personal data may have been taken after one of its third-party provider systems was compromised. The impacted personal data was limited to basic identifiers such as names and contact details and did not include account passwords or payment information. Harrods said the incident was isolated and contained. The company said the breach was not connected to a May incident that led to restricted internet access across its sites after an attempted unauthorized access. Four people were arrested in July on suspicion of involvement in related cyberattacks and were bailed. Other recent attacks affected Jaguar Land Rover and a London nursery chain.

Read at SecurityWeek