Harrods Latest Retailer to Be Hit by Cyber Attack
The luxury department store Harrods has become the latest retailer to fall victim to a cyber attack, with the company confirming that it had "restricted internet access at our sites" following an attempt to gain unauthorized access to its systems. The incident comes just one day after the Co-op shut down parts of its IT systems to fend off a hack, while Marks & Spencer continues to deal with a cyber attack that has cost it millions of pounds in lost sales.
Despite the breach, Harrods said its flagship store remained open, and customers can continue to shop via harrods.com. The company did not clarify what the scale of the impact on its network was, but advised customers to "not do anything differently at this point". A statement from Harrods read: "We recently experienced attempts to gain unauthorized access to some of our systems. Our seasoned IT security team immediately took proactive steps to keep systems safe and as a result we have restricted internet access at our sites today."
Richard Horne, chief executive of the National Cyber Security Centre (NCSC), the UK government body responsible for supporting organizations facing cyber threats, described the spate of attacks as a "wake-up call" for Harrods, the Co-op and M&S. He said that the NCSC is working closely with the companies that have reported incidents to fully understand the nature of the attacks and provide expert advice to the wider sector based on the threat picture.
Cody Barrow, former cyber chief at America's National Security Agency, now chief executive of cybersecurity firm EclecticIQ, said the incident exposed the sector's "mounting vulnerability to cyber threats". He warned retailers that they should assume they are targets for cyber attackers due to the volume of customer data and the high impact that disruption can cause. For consumers, vigilance is crucial: update passwords, monitor financial activity, and watch for scams exploiting recent breaches.
Co-op Shuts Down IT Systems Amid Cyber Attack
The Co-op said on Wednesday it had shut down parts of its IT systems in response to hackers attempting to gain access. The company also ordered staff to keep their cameras on during remote work meetings and verify all attendees, suggesting that it suspects hackers may be lurking in calls.
Marks & Spencer Continues to Deal with Cyber Attack
Marks & Spencer has seen its operations severely hampered by a cyber attack, the firm disclosed last week. Customers are still unable to place online orders and shelves have been left empty in some stores. The company is estimated to have lost millions of pounds in sales due to the disruption.
Experts Weigh In on Possible Connection Between Incidents
Toby Lewis, Head of Threat Analysis at cybersecurity firm Darktrace, said it was possible that the three incidents impacting M&S, the Co-op, and Harrods were a coincidence. However, he suggested two other possibilities: that all three retailers share a common supplier or technology that has been compromised and used as an entry point for hackers. Or, the scale of the attack on M&S may have prompted security teams at other retailers to look more closely at their safety logs and act on activity they would not have previously judged a risk.
Ransomware Attack Behind Marks & Spencer's Disruption
Security experts told the BBC on Tuesday that a ransomware group known as "DragonForce" was behind the attack on M&S. Ransomware is a type of malicious software used to scramble important data or files after gaining access to computer systems, essentially locking them away unless a ransom is paid.