password

No customer financial data, such as passwords or bank account details, had been obtained, Renault said, but other personal data had been accessed from a third-party provider.

The security system would not have flagged it as malicious as it would have looked like a normal login or password reset request from me.

Harrods said it would not engage with the "threat actor" and added the affected data, taken from a third-party provider, was limited to basic information and did not include passwords or payment details.

Those being detained can be required to provide information including passwords to devices.

Harrods described the breach in an email sent to customers on Friday evening as an "isolated incident", and that no passwords or payment details were taken.