JD Sports has warned that around 10m customers might have had their details stolen in a hack that hit the retailer.
The business said payment card details were safe, and that it has no reason to think the hackers have accessed users’ passwords.
Hackers accessed a system which contained information on orders placed between November 2018 and October 2020 by JD Sports customers.
Cyber attack: Hackers accessed a system which contained information on orders placed between November 2018 and October 2020 by JD Sports customers
Addresses, phone numbers and email addresses were stolen, a JD spokesman admitted. The impacted brands include JD, Size?, Millets, Blacks, Scotts and MilletSport.
The intruders could have gained access to billing, delivery and email addresses, full names, phone numbers, details of orders that have been placed, and the final four digits of payment cards.
JD warned customers to be vigilant against any potential fraudsters who could use this information to target them and convince the customers that the store is emailing or texting them.
The business said that it would contact those whose data might have been stolen.
‘We want to apologise to those customers who may have been affected by this incident,’ said chief financial officer Neil Greenhalgh.
A spokesman for JD Sports said: ‘We are engaging with the relevant authorities, including the UK’s Information Commissioner’s Office as necessary.
We are contacting affected customers so that we can advise them to be vigilant to the risk of fraud and phishing attacks.’
