UK footwear retailer Shoe Zone says hackers accessed internal systems

UK-based budget footwear retailer Shoe Zone said it experienced a data security incident that involved hackers gaining unauthorised access to its internal network.

 

In an announcement, Shoe Zone said that it recently became aware of a data security incident affecting its systems and launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident. The company said it also took steps to secure its affected network and stop the unauthorised access to its systems and data.

 

“Actions taken to date have ensured that the Company’s website remains operational and the Company continues to trade with its customers and suppliers,” the shoe retailer said.

 

Shoe Zone has notified the Information Commissioner’s Office and the National Cyber Security Centre about the incident and is working with the agencies to resolve the issue on priority.

 

The retailer has not disclosed whether the security incident compromised customer records but said it will notify all affected individuals as per applicable regulations. 

 

“Shoe Zone takes the issue of data security extremely seriously, and any affected individuals will be notified as appropriate and in accordance with applicable regulations,” the company added.

 

Commenting on the news, Cassius Edison, head of professional services at Closed Door Security, said the company is one of the UK’s largest footwear retailers, so this attack will cause serious concern for many of its customers, especially if their data has been stolen.

 

“As a precaution, and while Shoe Zone is investigating the incident, customers may want to update their passwords for the Shoe Zone online account, plus any other accounts using the same password, and monitor for fraudulent transactions on their bank accounts as well.

 

“Shoe Zone has stated it doesn’t expect the incident to have a material impact on the organisation, but as we have seen regularly in the past, things can change very quickly in breach forensics, so it might be some time before we know the full extent of this incident,” Edison added.