A few years ago it was much more complicated for them to take our data when buying, since we did it in person and we used to pay in cash. Times have changed and digital commerce and online payment have made life easier for us, but they also pose a risk that someone without very good intentions chooses to want to steal our data.
That has been the recent case of a chain of sports stores that is alerting its customers about a data leak of up to 10 million customers worldwide.
Stolen data of 10 million customers
JD Sports , a chain of sportswear and footwear stores originating in the United Kingdom, although with an international presence including our country, has reported an information leak produced after unauthorized access to which it responded immediately, avoiding subsequent access attempts.
However, despite this alleged rush to control the hack, a server data breach occurred in which online ordering information for 10 million customers was stolen. The company is sending notices to affected customers, warning that the exposed information corresponds to online orders placed between November 2018 and October 2020 .
The stolen information comprises a series of data including the following: full name, billing details, delivery address, email address, telephone number and order details. This data could be used to launch phishing or social engineering attacks against exposed individuals.
As for more sensitive data, related to payments, these emails only warn of the subtraction of the final four digits of the payment card, so it would never hurt to notify your bank and change your payment card if it still corresponds. with one of the ones you used to buy in the period covered.
What to do if you have an account at JD Sports?
JD Sports says it does not store full payment card details for online orders, so full financial information cannot have been compromised. The same is true of account passwords , which the company says it has no reason to believe were accessed.
However, as an added security measure, if you have a JD Sports account, it would be advisable to reset your passwords as a precaution. It is also possible that you are using the same credentials on other online platforms. Reset your passwords there too and replace them with strong and unique ones .
The store has reported that other sub-brands such as JD, Size?, Millets, Blacks, Scotts and MilletSport have also been compromised.