Harrods suffers new data breach exposing 430,000 customer records

Harrods has disclosed a new cybersecurity incident after hackers compromised a third-party supplier and stole 430,000 records containing sensitive e-commerce customer information. According to BleepingComputer, the breach is not related to the May cyberattack attributed to Scattered Spider, which targeted Harrods earlier in the year.

The company said that affected records may include labels used for marketing and other services, such as tier level or affiliation to a Harrods co-branded card, though there is no indication that passwords, payment information, or order histories were compromised. The threat actor has reportedly contacted Harrods directly, likely in an attempt to extort the retailer, but the company stated it would not engage in communication. Harrods has notified affected customers and relevant authorities, and urged customers to remain vigilant for phishing attempts.