Security News > 2023 > January > JD Sports admits intruder accessed 10 million customers' data

Sports fashion retailer JD Sports has confirmed miscreants broke into a system that contained data on a whopping 10 million customers, but no payment information was among the mix.

The data accessed consisted of customer name, billing address, delivery address, phone number, order details and the final four digits of payment cards "Of approximately 10 million unique customers."

As is customary in such incidents, JD Sports has contacted the relevant authorities such as the Information Commissioner's Office and says it has enlisted the help of "Leading cyber security experts."

"We want to apologize to those customers who may have been affected by this incident," said Neil Greenhalgh, chief financial officer at JD Sports.

He added: "We are continuing with a full review of our cyber security in partnership with external specialists following this incident. Protecting that data of our customers is an absolute priority for JS.".

The retailer has written to customers but the letters, seen by us, contain pretty much the same information that was posted to investors.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/01/30/jd_sports_breach/