Harrods, the long-lasting British luxurious division retailer, has confirmed that it was just lately focused in a cybersecurity incident, changing into the third main UK retailer in just some days to report a cyber incident. The Harrods cyberattack follows related breaches at Marks & Spencer and the Co-op.
The cyberattack on Harrods prompted the division retailer to take precautionary steps, together with limiting on-line entry whereas assuring prospects that its bodily shops and on-line procuring had been nonetheless operational.
The incident, which occurred in late April 2025, noticed hackers try to achieve unauthorized entry to Harrods’ methods. The UK retailer restricted internet entry at its websites as a precautionary measure however assured prospects that its flagship Knightsbridge retailer, H Magnificence branches, and airport retailers remained open. Moreover, on-line shopping services continued with out interruption.
Response to the Harrods Cyberattack
In an announcement supplied to The Cyber Express, the corporate confirmed the incident, stating, “We just lately skilled makes an attempt to achieve unauthorized entry to a few of our methods. Our seasoned IT safety workforce instantly took proactive steps to maintain methods secure, and because of this, we’ve got restricted web entry at our websites at present. At present, all websites, together with our Knightsbridge retailer, H magnificence shops, and airport shops, stay open to welcome prospects. Clients may also proceed to buy by way of harrods.com.”
Harrods has not but supplied extra particulars on the dimensions or potential penalties of the breach, together with whether or not buyer knowledge was affected. Customers had been reassured that no motion was wanted on their half right now, with the retailer promising to supply updates because the scenario evolves.
Rising Considerations within the Retail Sector
The Harrods cyberattack comes on the heels of comparable incidents that just lately disrupted operations at Marks & Spencer and the Co-op. Marks & Spencer, for instance, revealed a cyberattack linked to the hacking group “Scattered Spider” that precipitated widespread disruptions to on-line ordering methods and inventory shortages in some bodily shops. The assault, which reportedly concerned the deployment of DragonForce ransomware, has value Marks & Spencer thousands and thousands in misplaced gross sales. On-line orders had been suspended for a number of days, and authorities are nonetheless investigating the incident.
Meanwhile, the Co-op also reported an attempted network breach, prompting it to take precautionary measures such as shutting down parts of its IT systems and requiring staff to verify their identities during remote meetings. These measures were implemented to mitigate the risk of eavesdropping by cybercriminals.
The Nationwide Cyber Security Centre (NCSC), which oversees the UK’s cybersecurity efforts, has expressed concern over the rising variety of assaults concentrating on the retail sector. Richard Horne, the NCSC’s CEO, emphasised that these incidents ought to function a wake-up name for retailers to bolster their defenses in opposition to cyber threats. He confirmed that the NCSC was collaborating carefully with all affected firms to totally perceive the character of those assaults and to supply skilled recommendation to the broader retail sector.
Conclusion
The continued investigations into the current assaults on Harrods, Marks & Spencer, and the Co-op spotlight the developments of cybercriminals concentrating on high-profile UK retailers. Whereas no direct hyperlink between the incidents has been established, consultants speculate that shared vulnerabilities or frequent suppliers could also be concerned. That is an ongoing story, and The Cyber Express will probably be carefully monitoring the scenario. We’ll replace this submit as soon as we’ve got extra info on the incident and or any new assertion from the retailer.
Associated
Media Disclaimer: This report is predicated on inner and exterior analysis obtained by varied means. The knowledge supplied is for reference functions solely, and customers bear full duty for his or her reliance on it. The Cyber Express assumes no legal responsibility for the accuracy or penalties of utilizing this info.