Harrods data breach
Was I affected?
Harrods confirmed a breach affecting about 430,000 people, exposing names, email addresses, phone numbers and addresses. You are in scope if Harrods emailed you on or after September 26, 2025 about the supplier incident; most were online customers.
| Announced | Sep 26, 2025 |
|---|---|
| When it happened | September 2025 |
| People affected | 430,000 |
| Data exposed | Names, Email addresses, Phone numbers, Addresses and Other details |
| Through a vendor | Unnamed third-party supplier |
| Status | Confirmed by the company or a regulator filing |
What happened
Harrods emailed about 430,000 customers in September 2025 that their records were stolen from a third-party provider's system. The data covered names and contact details and, for some, loyalty and marketing information; Harrods said no passwords or payment details were taken. The attackers contacted Harrods seeking money and the company said it would not engage.
What should I do?
- Treat emails, texts and calls that mention Harrods, Harrods Rewards or orders as suspect; don't click links or share codes, and contact the company through its official app or website.
- Report scams or fraud to Action Fraud (actionfraud.police.uk) or call your bank on the number on your card.
- Check your credit file with Experian, Equifax and TransUnion UK, and consider Cifas Protective Registration if you are worried about impersonation.
Check the other services you use →