Security News > 2023 > January > JD Sports says hackers stole data of 10 million customers
UK sports apparel chain JD Sports is warning customers of a data breach after a server was hacked that contained online order information for 10 million customers.
JD Sports says it detected the unauthorized access immediately and responded quickly to secure the breached server, preventing subsequent access attempts.
JD Sports says it does not store full payment card details for online orders, so complete financial information cannot have been compromised.
Some notice recipients questioned JD Sports' decision to maintain a historical record of online orders fulfilled over four years ago, increasing the chances it may suffer a data leak.
"Hi, got this email today. 1) Why are you storing data of orders nearly 5 years ago and 2)"limited data" that's basically everything," commented a customer on Twitter, referring to the data breach notification shown above.
Finally, be on the lookout for targeted phishing emails that may use this stolen data to steal further information from customers.