JD Sports is the latest big company to admit that it was hit by a cyberattack that could put 10 million customers in danger.
The self-described King of Trainers asserts that it does not believe account passwords were accessed and does not hold complete payment card data.
Despite this, it offered an apology.
Neil Greenhalgh, chief financial officer, said: We would like to express our regret to any customers who might have been impacted by this incident. We are providing details on how to report fraudulent e-mails, phone calls, and texts and advising them to be cautious. In light of this incident, we are carrying out a comprehensive review of our cyber security in collaboration with specialists from the outside.
Orders placed online between November 2018 and October 2020 were hacked. Size?, JD, and other brands are affected. Scotts, MilletSport, Blacks, and Millets.
The hack comes after similar incidents at The Guardian and Royal Mail.
Experts believe that retailers are likely targets for cyberattacks because they store so much customer data.
JD stated in an email to customers: We apologize for the incident and take customer data security very seriously.
BlackBerry employee Keiron Holyome stated:
“This attack on JD Sports demonstrates that British institutions and their supply chains face the same global cyber risk.” After a cyberattack, the company may now be at risk of losing data relating to 10 million customers.
It could be hit with a fine of over £17 million.
DMH Stallard, a city lawyer for Jonathan Compton, stated: The numbers involved, the personal data accessed, and the time since the infringement are the aggravating factors in this case. Under Part 6 of the Data Protection Act of 2018, JD Sports can anticipate paying fines that are up to the maximum amount permitted.
“The higher maximum amount is £17.5 million or, whichever is greater, 4% of the total annual worldwide turnover in the previous financial year.”
At the SANS Institute, John Davis stated: We are reminded by the data breach at JD Sports that no organization is secure and that everyone can contribute to digital fortification. We have learned that budget alone is insufficient to implement adequate defenses after a significant number of high-profile security breaches just in the past year. The level of cybercriminals is rising. Their attacks are more common, more advanced, and harder to spot. Customers’ relationships and brand reputations are at stake. Businesses that can convince customers that they are best equipped to manage their data will be rewarded.
