The emblematic department store in London, Harrods, confirmed that it was targeted in a cyber attack, becoming the third major British retailer to report the cyber attacks in a week after incidents at M&S and the cooperative.
In a press release shared with BleepingCompute, Harrods said that threat actors have recently tried to hack their systems, which has restricted access to the sites.
“We have recently experienced attempts to obtain unauthorized access to some of our systems,” said Harrods to Bleeping Computer.
“Our experienced computer security team immediately took proactive measures to ensure systems security and, therefore, we have limited internet access to our sites today.”
“Currently, all sites, including our Knightsbridge store, beauty stores and airport stores, are open to accommodate customers. Customers can also continue to shop via Harrods.com.”
“We do not ask our customers to do anything differently at this stage and we will continue to provide updates if necessary.”
Harrods has not shared other details in response to the Bleeping Composses’ questions, such as if the systems have been raped or if data has been stolen.
However, the decision to restrict access to certain platforms indicates that they actively respond to the attack.
This incident follows shortly after two other British retailers, Marks and Spencer and Co-OP disclosed by Spencer.
M&S and cooperative were also struck by cyber attacks
Last week, Marks and Spencer confirmed that he had undergone a cyber attack that led to the disruption of his online control systems, his contactless payments and his click and collection service.
BleepingCompute later confirmed that the attack was linked to threat stakeholders associated with “scattered spiders” tactics, which deployed the DragonForce ransomware on the company’s network.
Coop yesterday also revealed a cyber-incident, declaring that they had experienced hacking attempts in their network.
However, an internal e-mail sent by the digital chief and the information manager Rob Elsey and seen by ITV News indicates that the violation is greater than that initial, indicating to the employees that VPN access was disabled and urging staff to be vigilant when using email teams and Microsoft.
“When the Microsoft team call is executed, please make sure that all participants are as planned and that users are on the camera,” reads part of the email.
“Do not publish sensitive information in the chat function of teams such as colleague, customer, customer or member data.”
The police have not published an official advice linked to these attacks, but as M&S and Co-Op would both have started with social engineering attacks, we will probably see a bulletin published shortly.
Based on an analysis of the malicious actions of 14 million, discover the 10 main Attr & CK techniques at 93% of the attacks and how to defend themselves against them.
