Adidas issues password warning after data breach

Adidas has shared an update as it contacts customers after details were taken in a data breach. The sportswear group published a statement on its website on May 23 to inform people that an "unauthorised external party" had access some consumer data through a third-party provider.

The data that was taken is mainly contact information for customers who contacted the customer service help desk in the past. No passwords, credit card or other payment-related information was taken.

Adidas also said in the statement that it is contacting customers whose data may have been compromised. The sportswear chain was asked for an update yesterday (May 28).

READ MORE:

READ MORE:

The company said it is still contacting people who may have been affected. The group also said that it is "generally prudent" to use strong passwords as a precaution. The original statement in full reads: "Adidas recently became aware that an unauthorized external party obtained certain consumer data through a third-party customer service provider.

"We immediately took steps to contain the incident and launched a comprehensive investigation, collaborating with leading information security experts. The affected data does not contain passwords, credit card or any other payment-related information.

"It mainly consists of contact information relating to consumers who had contacted our customer service help desk in the past. Adidas is in the process of informing potentially affected consumers as well as appropriate data protection and law enforcement authorities consistent with applicable law.

"We remain fully committed to protecting the privacy and security of our consumers, and sincerely regret any inconvenience or concern caused by this incident."

Another major retailer hit by a cyber incident recently is , with services still affected after the major cyber attack. Some customer details were also taken in this incident, including email addresses and phone numbers.

Jonathan Lee, director of Cyber Strategy at cyber security group , urged people to be on the look out for scams exploiting the stolen data. Scammers can use compromised data such as email addresses to send out convincing phishing emails appearing to be from a real organisation, to try to dupe a person into handing over personal or banking details.

READ MORE:

READ MORE:

The security expert warned: "M&S customers should question any email which asks them to take urgent action, such as resetting their password or providing personal information. Never click on links in suspicious emails."