Adidas is latest cyberattack victim with shoppers' data stolen

Who will be next? (Picture: Reuters)

Adidas has been hacked,with customers’ personal information stolen in a cyber attack.

The sportswear giant said criminals stole ‘mainly’ contact information of people who have dealt with its customer service desk.

So if you bought trainers or sports bras recently and had any questions about them,you might have been targeted.

A spokesperson said the incident ‘has no operational impact’,and that they are in process of informing anyone who might have been affected.

Passwords,credit card information and payments-related data were not affected by the breach,the company said.

The Adidas hack comes after Marks & Spencer,Co-op and Harrods faced massive disruption in recent weeks following cyber attacks.

The public statement from Adidas

Marks & Spencer said last week that the hack would cost it about £300 million after being targeted around the Easter weekend.

Online shopping is still not available on its website,despite it now being over a month since the hack was made public.

A statement on the Adidas website said: ‘Adidas recently became aware that an unauthorised external party obtained certain consumer data through a third-party customer service provider.

‘We immediately took steps to contain the incident and launched a comprehensive investigation,collaborating with leading information security experts.

How to stay safe

Vonny Gamot,a VP with online protection company McAfee,gave the following tips to Adidas customers:1. ‘Assume You’re Affected – even if you haven’t received notification from Adidas yet,assume your information may have been compromised if you’ve been an Adidas customer. Companies often take weeks to identify all affected individuals.’2. Change Your Passwords Immediately – start with your Adidas account,then move to any accounts that share the same password. Use strong,unique passwords for each account. This is non-negotiable. In 2025,password reuse is one of the fastest ways to turn a single breach into multiple compromised accounts.3. Enable Two-Factor Authentication Everywhere – if you haven’t already,enable two-factor authentication (2FA) on all accounts that support it,starting with email,banking,and shopping accounts. This adds a crucial second layer of security.4. Monitor Your Financial Accounts – check bank statements,credit card bills,and investment accounts for any unusual activity. Set up account alerts if you haven’t already,many financial institutions offer real-time transaction notifications.5. Consider online protection tools that can keep your info safe with early alerts that show you if your data is found on the dark web.‘The affected data does not contain passwords,credit card or any other payment-related information.‘It mainly consists of contact information relating to consumers who had contacted our customer service help desk in the past.‘Adidas is in the process of informing potentially affected consumers as well as appropriate data protection and law enforcement authorities consistent with applicable law.‘We remain fully committed to protecting the privacy and security of our consumers,and sincerely regret any inconvenience or concern caused by this incident.’Marks & Spencer shops were seen with empty shelves after a massive cyberattack (Picture: PA)News of the hack comes weeks after Greece filed a lawsuit against Adidas over what appeared to be a drone light show advertising the sports brand over the fifth-century BC Acropolis.Footage shared on social media shows a light show of drones forming a shoe above the ancient Athens citadel. Adidas’s three-stripe logo,along with the words ‘Feel Fast’,were also displayed.Greece’s Culture Minister Lina Mendoni said the show used the Acropolis for commercial purposes,in breach of a national law. She said it took place without approval from the Culture Ministry.Adidas said all required permits were received and adhered to and ‘No image of the Acropolis monument was used by Adidas for advertising or other purposes.’