Adidas has confirmed a cyber-attack that exposed the personal details of some of its customers. The data breach involved contact details of people who had interacted with the company’s help desk. However, Adidas stated that sensitive information such as passwords and payment data was not affected.
The incident came to light after an unauthorized external party accessed customer data through a third-party customer service provider. As soon as Adidas identified the issue, they took immediate action to contain it and started a detailed investigation with the support of cybersecurity experts.
According to the company, affected customers are being informed, and authorities have been notified as per legal requirements. The company has also shared a message of regret for any concern or inconvenience caused.
Consumer rights group Which? highlighted the importance of clear communication from Adidas during this time. They advised customers to stay alert by watching their bank accounts, checking credit reports, and being cautions of suspicious messages or emails that could be scams related to the breach.
This incident follows a series of high-profile cyber-attacks on other well-known retailers like Marks & Spencer and Co-op. While these attacks disrupted their business operations significantly, Adidas has not reported any such impact on its services.
There have been multiple cyber-attacks reported since April 2025. UK police are currently focusing on a hacking group known as Scattered Spider, suspected of targeting brands like M&S, Co-op, and Harrods. The group, however, has not been linked to the Adidas breach.
Interestingly, Adidas has also reported other data breaches in different parts of the world, including its branches in Turkey and South Korea earlier this month. As cyber threats continue to rise, brands are under pressure to strengthen their data protection systems to prevent future incidents.