LONDON, UK – Iconic luxury department store Harrods has become the latest high-profile retailer to fall victim to a cyber attack, sending ripples of concern through the industry already reeling from recent breaches at Marks & Spencer and the Co-op. The Knightsbridge institution confirmed today that it had detected attempts to gain unauthorised access to its systems, prompting a restriction of internet access across its sites as a precautionary measure.
The attempted breach at Harrods marks the third significant cyber incident targeting major UK retailers in a matter of days, raising serious questions about the vulnerability of the sector to increasingly sophisticated online threats. While details of the attack on Harrods remain scarce, the company acted swiftly to secure its digital infrastructure.
In a statement released this morning, a Harrods spokesperson said: “We recently experienced attempts to gain unauthorised access to some of our systems. Our seasoned IT security team immediately took proactive steps to keep systems safe, and as a result, we have restricted internet access at our sites today.”
The retailer assured customers that all physical locations, including its flagship Knightsbridge store, H beauty outlets, and airport stores, remain open and are welcoming shoppers. Online operations via harrods.com are also continuing. “We are not asking our customers to do anything differently at this point, and we will continue to provide updates as necessary,” the spokesperson added.
The news of the attack on Harrods comes on the heels of a serious ransomware attack on Marks & Spencer, which has now entered its seventh day of disruption. M&S continues to grapple with the fallout, having been forced to suspend online orders, halt all recruitment, and facing issues with in-store systems like loyalty cards and handheld scanners. The Metropolitan Police are currently investigating the attack on M&S.
Meanwhile, the Co-op Group also confirmed this week that it had been targeted by an attempted hack, leading to the shutdown of parts of its IT infrastructure as a preventative measure. While its stores and funeral services continue to operate, staff have reportedly been instructed to heighten security protocols for remote meetings.
The clustering of these cyber incidents targeting prominent retailers has prompted alarm within the cybersecurity community and among policymakers. Experts warn that companies in the same sector can often become secondary targets following a high-profile attack, as threat actors may exploit similar vulnerabilities.
The National Cyber Security Centre (NCSC) has described the recent spate of attacks as a “wake-up call” for the retail sector, urging businesses to bolster their cyber defenses and remain vigilant against potential threats.
While it remains unclear whether the attacks on M&S, the Co-op, and Harrods are linked, the timing and nature of the incidents suggest a concerted effort by cybercriminals targeting the retail industry. The focus now will be on the ongoing investigations, the extent of any data breaches, and the measures these retailers will implement to prevent future attacks and reassure concerned customers. For Harrods, the immediate priority will be to secure its systems fully and ensure the continued smooth operation of its physical and online stores during this period of heightened cyber threat.

Image source: Wikimedia Commons