British sports and fashion retailer JD Sports Fashion has been the victim of a cyber attack which saw customer data relating to historical online orders compromised, it said.
The group said the affected data was “limited,” as it does not hold full payment card data and does not believe account passwords were accessed.
The attack related to online orders placed for the JD, Size?, Millets, Blacks, Scotts and MilletSport brands between November 2018 and October 2020.
Read Also
JD Sports said the information that may have been accessed consisted of the name, billing address, delivery address, email address, phone number, order details, and the final four digits of payment cards of about 10 million customers.
The group has apologised to customers and is contacting those affected to advise them to be vigilant about the risk of fraud and phishing attacks.
It is also investigating the incident, working with cyber security experts and engaging with the UK’s Information Commissioner’s Office (ICO), the country’s data protection watchdog.
Cyberattacks on UK companies are becoming increasingly common.
Earlier this month the Royal Mail‘s export services were severely disrupted by what it described as “a cyber incident.”
FacebookTwitterLinkedin