London police apologise over Al-Fayed probe data breach

London police apologised on Saturday (August 15, 2026) after email addresses of complainants alleging sexual abuse by the late Harrods owner Mohamed Al-Fayed were accidentally shared with those on a communications distribution list containing victims and others.

The data breach occurred on Tuesday (August 11), when the Metropolitan Police sent a monthly update to victims but failed to hide — or “blind cc” — recipients’ email addresses, leaving them visible to others on the list.

Around 140 women were impacted by the error, according to BBC News, with U.K. media reporting that the U.K.’s data watchdog had been notified of the breach.

“Due to human error, recipients’ email addresses were visible to others on the distribution list,” the Met said in a statement.

“The issue was identified quickly and immediate action was taken,” it added, noting that those affected had been contacted “directly on the day of the incident”.

“We understand the impact this may have on victims and sincerely apologise,” the force said.

“The incident is being investigated as a matter of priority, and we are reviewing our processes to help prevent a similar breach from happening again.”

To date, some 157 victims have reported allegations to the police of sexual assault, rape, sexual exploitation and human trafficking in relation to Fayed, who died aged 94 in 2023.

The late Egyptian business tycoon bought Harrods in 1985, after acquiring the Ritz hotel in Paris. Multiple complaints were made against him before his death, but none led to prosecution.

Some 259 victims have also applied for compensation under a redress scheme opened by Harrods last year after a growing number of former employees came forward to launch complaints against Fayed following a 2024 BBC documentary.

The Met has so far questioned six people suspected of enabling Fayed’s offences, although it has not yet made any arrests.