New Harrods Data Breach Leaks Personal Information of 430,000 Customers

Harrods has confirmed a data breach in which hackers accessed personal information belonging to 430,000 customers. The data was obtained from a third-party provider and was limited to basic identifiers, including customer names and contact details where provided, as well as marketing preferences, loyalty card data, and details about co-branded partnerships.

Importantly, no payment information, passwords, or financial data were accessed during the incident, and Harrods stressed that the breach did not include sensitive financial information that could directly harm customers’ accounts. The company noted that the exposure affected only a small proportion of its customer base, and all affected customers and relevant authorities have been informed, with full cooperation with investigating authorities and ongoing monitoring.

Following the breach, threat actors contacted the company, though Harrods stated it will not engage with them. The incident comes as part of a broader pattern of cybersecurity challenges affecting major UK businesses in 2025.