14 DAY TRIAL // Adidas announced on Thursday that details of its US customers who purchased products online had been exposed following a security breach.
The company hasn’t provided any details as to how many customers might be affected, but it did say that information like contact details, physical addresses, and email info were exposed. Login information, like username and passwords, might have leaked as well. Passwords, however, were encrypted, it said.
On the other hand, credit card data and fitness information were not exposed, but the company has started notifying affected customers of the security breach.
“adidas today announced that it is alerting certain consumers who purchased on adidas.com/US about a potential data security incident. On June 26, adidas became aware that an unauthorized party claims to have acquired limited data associated with certain adidas consumers,” the company noted.
Investigation under way
An investigation has already started, and in the meantime, customers who are afraid that their data was compromised can take further actions, like changing their passwords on services where the same credentials are being used. While Adidas says the passwords were encrypted, the exact damage following the breach will be shared when the investigation comes an end.
“adidas is committed to the privacy and security of its consumers' personal data. adidas immediately began taking steps to determine the scope of the issue and to alert relevant consumers. adidas is working with leading data security firms and law enforcement authorities to investigate the issue,” the firm continued.
The breach did not expose customers who purchased products from any other website than adidas.com/us, as only the American online shopping site has been targeted by hackers.
There are no details as to when the breach actually occurred, despite the company saying that it became aware of it earlier this week. Full information should be disclosed after the forensic investigation is complete.