Adidas discloses a hack involving a third-party service provider

Adidas, the popular German sportswear brand, has announced a data breach resulting from a third-party customer service provider hack. Based on reports, the compromise of one of its service providers has resulted in unauthorised access to consumer data.

The company indicated that it recently learned an external party had gained unauthorised access to specific consumer information through the compromised provider. Subsequently, Adidas implemented containment strategies and initiated a thorough investigation with the help of an external service provider.

 

Adidas insisted that the hack had not compromised any payment information that would significantly concern customers.

 

Adidas assured the public in a recent statement that the breached data did not include any payment information or customer passwords. The attackers were reportedly limited to accessing only contact information.

In addition, the firm has informed relevant data protection and law enforcement authorities and is currently notifying potentially affected individuals in accordance with applicable laws and regulations.

The company explained that it is still committed to safeguarding the privacy, safety, and security of its consumers and regrets any inconvenience or concern this incident may cause.

Currently, Adidas has not provided specific information such as the name of the compromised service provider, the breach timeline, the total number of individuals affected, or whether its internal systems were compromised.

This incident follows earlier disclosures earlier this month about similar breaches involving customers in Turkey and South Korea.

Those breaches impacted individuals who had contacted Adidas’ customer service centre in or before 2024. The compromised data included full names, email addresses, phone numbers, birthdates, and physical addresses.

This event is not Adidas’s first data security incident. In June 2018, the company disclosed that attackers had stolen contact details, usernames, and encrypted passwords from several million users of its US website.

Media representatives have reached out to Adidas for further details, but the company has not yet responded.