JD Sports cyber attack risks 10m customers’ private data

TEN million people risk having their phone numbers and email addresses stolen after JD Sports was hit by a cyber attack.

JD Sports warned that customers who had bought items on its website, as well as Size?, Blacks and Millets websites, between November 2018 and October 2020 may be affected.

The retailer said customers must be vigilant over potential scam emails, calls and texts, and that it was contacting those whose details had been stolen.

The company does not believe passwords have been accessed and it does not hold full payment card data, although JD Sports said that the hackers could have gained access to the final four digits of customers’ payment cards.

Neil Greenhalgh, JD Sports chief financial officer, apologised to customers affected by the incident.

He said: “We are continuing with a full review of our cyber security in partnership with external specialists following this incident. Protecting the data of our customers is an absolute priority.”

JD Sports is the latest company to be hit by a cyber attack, with Royal Mail only last week restarting international deliveries following a suspected ransomware attack. Last month, The Guardian was hit by a ransomware attack, which forced staff to work from home during the disruption.

This attack is a blow for JD Sports, which shrugged off cost of living pressures to record its best week ever over Christmas.

JD Sports is expecting annual profits before tax and exceptionals this year to top £1bn for the first time.

In its latest financial year, which ended Jan 28, it said profits would be at the top end of a range of analyst forecasts, which is about £985m.