Adidas faces major data breach, exposing customer data

Global sportswear giant Adidas said it suffered a significant data security incident that compromised the sensitive personal information of its customers.

 

In a data security incident notice published on its website, Adidas said it recently discovered that an unauthorised party had accessed the internal network of one of its customer service partners, compromising certain customer information.

 

Adidas immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident. It also took steps to terminate the unauthorised access and contain the same.

 

“The affected data does not contain passwords, credit card or any other payment-related information. It mainly consists of contact information relating to consumers who had contacted our customer service help desk in the past,” Adidas said in its notice.

 

The sportswear giant has notified relevant law enforcement authorities about the incident and is working with them to resolve the issue at the earliest.

 

“Adidas is in the process of informing potentially affected consumers as well as appropriate data protection and law enforcement authorities consistent with applicable law. 

 

“We remain fully committed to protecting the privacy and security of our consumers, and sincerely regret any inconvenience or concern caused by this incident,” the company added.

 

Earlier his month, Adidas disclosed data security incidents that compromised the personal data of its customers in South Korea and Turkey. In both incidents, unauthorised parties gained access to personal customer data via third-party service providers.

 

According to South Korean media, Adidas notified its customers via email saying “recently, we became aware that some customer-related data was accessed by a third party,” and clarified that “the data involved pertained to customers who contacted Adidas customer service in 2024 or earlier.

 

“The leaked information may include names, email addresses, phone numbers and dates of birth. However, financial data such as passwords and payment information were not affected,” Adidas Korea added.

 

Adidas Turkey also informed its customers via email about a similar data breach, which was linked to third-party involvement. The breach led to the exposure of personal information, though financial and password data were not affected.