Adidas Reports Cyber Attack Resulting in Customer Data Breach

Adidas has announced that it has fallen victim to a cyber attack, during which personal information of customers was compromised. The sportswear giant revealed that the attackers obtained “certain consumer data,” primarily consisting of contact information from individuals who interacted with its customer service team.

Fortunately, Adidas confirmed that passwords, credit card details, and other payment information were not affected by this breach. In a statement on their website, the company expressed its commitment to safeguarding consumer privacy and security, apologizing for any inconvenience or concern this incident may have caused.

This incident follows a series of significant cyber attacks targeting retailers, including Marks & Spencer and Co-op, which have disrupted their business operations. However, there is currently no evidence suggesting that Adidas has experienced similar operational impacts.

Adidas stated, “We recently became aware that an unauthorized external party obtained certain consumer data through a third-party customer service provider.” In response, the company has taken immediate steps to contain the situation and has initiated a thorough investigation in collaboration with leading information security experts.

The firm is actively notifying potentially affected consumers and relevant data protection and law enforcement authorities as required by law. Since April 2025, several cyber incidents have been reported, with some experts identifying possible connections among them.

UK police are reportedly investigating a notorious group of English-speaking hackers known as Scattered Spider, who are believed to be responsible for the M&S cyber attack. This group has also been linked to breaches at Co-op and Harrods, with M&S estimating the financial impact of the breach to be around £300 million, roughly one-third of its profit.

While there is no indication that Scattered Spider is behind the Adidas data breach, the company disclosed earlier this month that it had experienced data breaches in other regions, including its Turkish and South Korean operations.