Login
iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
Powered by MOMENTUMMEDIA
What first appeared to be a data breach affecting two regional adidas locations has turned into a third-party incident affecting customers around the world.
German sportswear giant adidas has disclosed a cyber attack on one of its third-parties, leading to data being exfiltrated.
Following reports of two regional adidas data incidents, adidas Türkiye (Turkey) and adidas Korea, adidas has confirmed that a threat actor breached the systems of one of its third-party providers and exfiltrated Adidas data.
“adidas recently became aware that an unauthorised external party obtained certain consumer data through a third-party customer service provider,” it said in a statement.
“We immediately took steps to contain the incident and launched a comprehensive investigation, collaborating with leading information security experts.
“The affected data does not contain passwords, credit card or any other payment-related information. It mainly consists of contact information relating to consumers who had contacted our customer service help desk in the past.”
The previous regional data breach disclosures also stated that the exfiltrated data was that of customers who had contacted its customer service help desk. According to an email sent to customers by adidas Turkey, data included full names, phone numbers, dates of birth, gender details and email addresses.
However, adidas Turkey also said that no passwords or financial information was accessed.
Adidas has a massive international customer base. With operations across 50 countries, the adidas’ adiClub membership program has 303 million members. Additionally, 41 per cent of sneaker owners in the US own adidas. If the incident affects customers who have reached out to the help desk globally, the data of potentially millions could have been exposed.
In its latest statement, the company says it has begun notifying customers of the incident.
“Adidas is in the process of informing potentially affected consumers as well as appropriate data protection and law enforcement authorities consistent with applicable law.
“We remain fully committed to protecting the privacy and security of our consumers, and sincerely regret any inconvenience or concern caused by this incident.”
Cyber Daily has not yet observed any threat actors taking responsibility for the incident.
Be the first to hear the latest developments in the cyber industry.
