Adidas Investigates Third-Party Hack Amid Data Theft Allegations

Adidas-Investigates-Third-Party-Hack-Amid-Data-Theft-Allegationsdata

Adidas Probes Potential Data Breach at Licensing Partner

Adidas has initiated an investigation into a possible data breach at one of its independent licensing partners. The inquiry comes after a threat actor, claiming to be part of the Lapsus$ Group, asserted that it had stolen data from Adidas’ extranet.

Claims of Stolen Data

According to the attacker, the compromised data includes 815,000 rows of information, encompassing names, addresses, passwords, birthdates, company names, and technical details.

No Evidence of Breach to Adidas’ IT Infrastructure

Despite these claims, Adidas has found no evidence to suggest that its IT infrastructure, e-commerce platforms, or customer data have been breached. The company has not provided further details regarding the incident.

Previous Incidents

This development follows a previous incident in which Adidas reported that its customers’ data had been exfiltrated after an external customer service provider was compromised. Additionally, the hacking collective Scattered Lapsus$ Hunters, which includes Lapsus$, Scattered Spider, and ShinyHunters, claimed to have stolen over 20 million records from Adidas two years ago.

Lapsus$ Group’s History of Breaches

The Lapsus$ Group has been involved in several high-profile breaches in the past. Adidas is working to determine the extent of the potential breach and the validity of the threat actor’s claims.

Investigation and Response

The company has not disclosed whether it has engaged with the attacker or if any ransom demands have been made. The incident highlights the risks associated with third-party vendors and the importance of ensuring that these partners maintain robust security controls to protect sensitive data.

As the investigation continues, Adidas is working to notify affected parties and provide support to those who may have been impacted by the breach. The company has not disclosed the identity of the licensing partner involved or the specific data that may have been compromised.

According to the attacker, the compromised data includes 815,000 rows of information, encompassing names, addresses, passwords, birthdates, company names, and technical details.



About Author

en_USEnglish