Once again...
Adidas has confirmed a new data breach.
The incident was caused by the compromise of a third-party customer service provider.
This resulted in the exposure of certain consumer information.
Although the company claims that no payment information or passwords were compromised, the attackers accessed contact information such as names, email addresses, phone numbers, dates of birth, and addresses.
Ongoing investigation and background
The incident is still under investigation. Key details such as the name of the affected vendor, the date of detection, or the number of people compromised have not been disclosed.
Este evento se suma a otros incidentes recientes divulgados por Adidas este mes.
Afectaron a clientes en Turquía y Corea del Sur que interactuaron con atención al cliente en 2024 o antes.
Adidas had already suffered a similar breach in 2018.In that instance, unidentified attackers obtained contact information, usernames, and encrypted passwords for millions of US customers. This shows a worrying pattern in the protection of its supply chain.
Key points of the incident
- The attack did not compromise financial data or passwords.
- This was an unauthorized access through a third-party provider.
- The data breach includes basic personal information.
- It affects consumer privacy in multiple regions.
- The company has not yet provided additional figures or technical details.
Possible input vectors
Aunque no se ha detallado el vector exacto, el compromiso de un tercero sugiere fallos en la seguridad del proveedor. Esto puede incluir accesos remotos inseguros, phishing al personal de soporte o vulnerabilidades en la infraestructura.
¿Cómo puede ayudar Amber Solutions?
This incident corresponds to a third-party commitment.
At Amber Solutions We offer vendor risk assessment services and proactive cybersecurity audits.
We also conduct attack simulations (red teaming) to detect weaknesses in the digital supply chain.
Our incident response and forensic analysis services help investigate events and prevent future intrusions and/or potential data breaches.
Early Protection: Our Approach
At Amber Solutions We help protect your business against these types of attacks.
Not only do we detect them early, we also anticipate them with a comprehensive cyberintelligence and offensive security strategy.
