JD Sports Hacked – What 10 Million Customers Need to Know

High-street sports fashion retailer JD Sports has confirmed that it has been targeted in a cyberattack leading to unauthorized access to customer data. How much data? A spokeswoman for JD Sports Fashion Plc said the number could be “around 10 million unique customers.” Here’s what we know so far.

JD Sports Security Incident Disclosure Email

In an email to customers seen by this reporter, JD Sports Group said a security incident that could have affected as many as 10 million customers resulted in attackers using “name, shipping, billing and email addresses. , phone number, the last four digits of your payment card (only) and/or your order details.”

According to the email, the data is from a database containing orders placed between November 2018 and October 2020.

Forbes detailsThis is how hackers accessed 34,942 PayPal accountsTo davy winder

JD Sports Fashion Plc Statement to the Press

In an emailed statement from a JD Sports Fashion Plc spokesperson, the organization identified the affected JD Sports Group brands as “JD, Size?, Millets, Blacks, Scotts and MilletSport.” confirmed. The statement also added that JD Sports does not retain full payment card details and “has no reason to believe that the account password has been accessed.”

Obviously, as a cybersecurity expert, I advise all customers of these brands to change their passwords ASAP anyway.

We take your security seriously

“We would like to apologize to any customers who may have been affected by this incident,” said Neil Greenhalf, chief financial officer of JD Sports, and advised them to beware of fraudulent emails, calls and texts. “Protecting our customers’ data is an absolute priority for JD,” Greenhalgh said while a full security review continued, including assistance from outside experts. said as expected.

Security experts advising interested customers

John Davis, Director of UK and Ireland, SANS Institute, said: The golden rule to remember is that prevention is always better than cure. Brought to you by flagging the reporting center.”

Forbes detailsHacker Stolen LastPass Password Vault – Change Master Password NowTo davy winder

Meanwhile, KnowBe4’s lead security awareness champion, Javvad Mailk, advises users to “be careful if you receive an email or message that may claim to be from JD Group.” . If someone receives such an email, they should not respond, but rather seek to verify the authenticity directly with the company. ”

An incident disclosure email sent to customers informed them that anyone wishing to report suspicious activity should contact Action Fraud, the UK’s national fraud and cybercrime reporting centre, to do so. Privacy.Support@jdplc.com” concludes the email.