JD Sports Fashion Plc was the target of a cyberattack that led to unauthorised access to a system that included consumer information related to some online orders.
Limited data is affected. JD Sports does not own the complete set of credit card information, and it is also unlikely that account passwords have been compromised.
About 10 million distinct customers' names, billing and delivery addresses, email and phone numbers, order information, and the last four digits of their credit cards are among the facts that may have been accessed.
The business claimed to have taken the immediate actions required to look into and address the situation, including collaborating with top cyber security specialists.
TPRM report: https://scoringcyber.rankiteo.com/company/jd-sports-fashion-plc
"id": "jds563723",
"linkid": "jd-sports-fashion-plc",
"type": "Data Leak",
"date": "01/2023",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': '10 million',
'industry': 'Retail',
'name': 'JD Sports Fashion Plc',
'type': 'Company'}],
'data_breach': {'number_of_records_exposed': '10 million',
'personally_identifiable_information': 'Yes',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Order Information']},
'description': 'JD Sports Fashion Plc experienced a cyberattack resulting in '
'unauthorized access to consumer information related to some '
'online orders.',
'impact': {'data_compromised': ['Names',
'Billing and delivery addresses',
'Email and phone numbers',
'Order information',
'Last four digits of credit cards']},
'response': {'third_party_assistance': 'Top cyber security specialists'},
'title': 'JD Sports Fashion Plc Cyberattack',
'type': 'Data Breach'}