Harrods says some e-commerce customer data taken by third-party

Harrods has warned some e-commerce customers this week that basic personal information, including names and contact details, was taken after a system belonging to one of its third-party providers was compromised, the luxury Knightsbridge department store said. The store said affected customers have been notified and that account passwords and payment details were not included in the data taken.

In a statement Harrods said: "We have been notified by one of our third-party providers that some Harrods ecommerce customers personal data has been taken from one of their systems." The company added that the impacted data is limited to basic personal identifiers and that the third party has confirmed the incident is isolated and has been contained. Harrods said it is working closely with the provider and has notified all relevant authorities.

Harrods sought to reassure customers that its own systems were not compromised. A company spokesman said it is important to note that the data was taken from a third-party provider and is unconnected to attempts to gain unauthorised access to some Harrods systems earlier this year. In May the retailer restricted internet access across its sites as...