Platinum Harvey Nichols credit

[Dark Horse]

Just a flag on the Ts and Cs which exclude in store concessions. I bought Tom Ford cologne from their concession assuming everything in Harvey Nics counted on 13 Jan and no sign of credit. I don’t think it’s coming. 🙁

[Andrew J]

Dark Horse wrote:

Just a flag on the Ts and Cs which exclude in store concessions. I bought Tom Ford cologne from their concession assuming everything in Harvey Nics counted on 13 Jan and no sign of credit. I don’t think it’s coming. 🙁

You’ll be fine – that’s not a concession.

[byronlewis]

Got the credit back on my Harvey Nichols purchase within 2 days, pretty quick turnaround

[R2]

Datapoint.
Friday: £50 gift card bought in store HN Knightsbridge, London.
Saturday: Charge posted on my AMEX account.
Wednesday: £50 credit applied.

[ElSemm]

I got my HN £50 cashback on the 5th July after placing an internet order. However, the offer is still showing in ‘my offers’ on the app ie it hasn’t disappeared after redemption…..

[Skywalker]

@ElSemm, the offer strangely doesn’t disappear from the ‘active’ list after use (nor does the Dining Credit)

[ElSemm]

👍

[Paul]

Lunch on the 26th Aug credit on 1st Sep.

[RV]

Sharing what I received from HN today, as might be relevant for many here who have an account with them!

—//—

Dear Customer,

We are writing to inform you that a data breach incident has occurred with your Harvey Nichols Account. Our team has assessed the impact this has had on your personal information, but we are not aware of any misuse of your data.

We want to reassure you that no sensitive information such as financial data or passwords has been exposed and that we have acted swiftly to ensure our systems are fully secure again. However, non-sensitive information, including your name, address, phone number, company name and email address have been accessed (where provided), so we are contacting you to ensure you are aware of how to protect yourself from any potential misuse of your data.

A full Q&A is available on our website at http://www.harveynichols.com which outlines what has happened, the measures taken and advice on how to best protect yourself. Please remain vigilant if you receive any suspicious emails or calls claiming to be from Harvey Nichols.

At Harvey Nichols, we take the protection of your personal data very seriously and we are fully committed to maintaining the confidentiality of the personal data you have entrusted us with. Please be assured that we are taking every step necessary to address the incident and ensure the ongoing security of your data, and the Information Commissioner’s Office (ICO) and the Data Protection Commission in Ireland has been notified.

We are very sorry for the inconvenience and any concerns this may have caused. If you have any further queries, please do not hesitate to contact us at dataenquiries@harveynichols.com.

Yours sincerely
Data Protection Office
Harvey Nichols

-/-

The link to the Q&A is here: https://store-mqq1i1xa2c.mybigcommerce.com/content/yst-media/1293/Harvey-Nichols-Data-Breach-Q&A.pdf?utm_source=beauty&utm_medium=email&utm_content=Databreach_180924&utm_campaign=2&et_rid=261022934

[RV]

This bit is very intriguing:

“The information exposed is non-sensitive information, including customer names,
phone numbers, addresses and email addresses (where provided).”

I know all of that is probably easily available on a dark web/telegram list, but how come HN says that’s not sensitive information?! 🤣

[Blair Waldorf Salad]

@RV they are not sensitive information caregories under data protection law, which is the law under which Harvey Nichols are sending such emails.

I’ve always found it baffling that legislators in Brussels decided my financial info is not sensitive, but who I voted/might vote for is.

[cats_are_best]

I’ve now had the notification on both of my HN accounts.

Main concern is mobile number, combined with accurate name and address info. I also wonder if date of birth was exposed, as the list says “including’, not that these were the only things.

I didn’t appreciate HN putting the details behind a link that turned out to be a PDF. Best to stick to plain text, not tell me you’ve been hacked then ask me to trust an opaque link to a potential attack vector.