JD Sports is contacting customers who have been affected by a cyber attack that may have exposed their personal details.
The incident impacted 10 million people who placed orders between November 2018 and October 2020.
Customer names, delivery, billing, email addresses, phone numbers, and the last four digits of bank cards were potentially exposed.
It includes people who shopped at JD as well as the group’s Size, Millets, Blacks, Scotts, and MilletSport brands.
The sportswear company does not believe account passwords were accessed, and has assured people affected that their full payment card details were not held. They are however are being warned to watch out for scam emails, calls, and texts.
The company has said it is engaging with the UK’s Information Commissioner’s Office about the attack.
