Adidas is investigating a potential data breach involving 815,000 records, allegedly compromised through a third-party customer service provider. While the company has confirmed that there is no evidence its own IT infrastructure or e-commerce platforms were impacted, the stolen data could include sensitive customer information.
Details of the Investigation
Adidas is investigating a data breach that may have affected up to 815,000 records, involving a third-party customer service provider rather than its own systems. A hacker claiming to be part of the Lapsus$ Group took responsibility for the breach on BreachForums, alleging that the stolen data includes personal and technical information.
Adidas confirmed the breach involved an independent licensing partner, a martial arts product distributor, and not the company’s core systems. The third-party provider operates its own IT infrastructure, separate from Adidas’ networks. Adidas clarified that its IT systems, e-commerce platforms, and consumer data were not affected.
Lapsus$, known for social engineering attacks, claimed responsibility for accessing Adidas’ extranet and stealing data such as customer names, email addresses, passwords, birthdays, company names, and technical details. Adidas has not disclosed how the breach occurred, but is continuing its investigation.
Lapsus$ has previously targeted major companies like Nvidia and Microsoft using methods like SIM swapping and bribing employees for sensitive credentials. This breach follows a similar incident in May 2025, where Adidas faced a data theft through a third-party provider. These recurring breaches highlight concerns over the security of Adidas’ third-party partners.
When Did This Breach Occur?
The breach was first reported on February 16, when a user claiming to be part of the Lapsus$ Group posted about the attack on BreachForums. The hacker group stated that they had compromised Adidas’ extranet, but the company has yet to confirm the exact timing of the breach or how long the hackers had access before being detected.
Lapsus$ Claims Sensitive Data was Breached
The stolen data, according to the Lapsus$ Group, includes the following information:
First and last names
Email addresses
Birthdays
Company names
Technical data
This type of information is often used for identity theft and phishing attacks, potentially putting affected individuals at risk. Although Adidas claims its core systems were not impacted, this breach highlights the vulnerabilities associated with third-party service providers.
What You Can Do
If you believe your data may have been affected by the Adidas breach, there are steps you can take to protect yourself:
Monitor your accounts: Keep an eye on your bank and credit card statements for any unusual activity. Watch for unauthorized transactions or attempts to open new accounts in your name.
Change passwords: If your email or password was involved in the breach, update your credentials on all accounts that use the same information. Consider enabling multi-factor authentication (MFA) for added security.
Stay alert for phishing attempts: Be cautious of any emails or messages asking for personal information. Phishers may attempt to use the stolen data to scam you.
Sign up for credit monitoring: Consider enrolling in a credit monitoring service to receive alerts if your personal information is being used fraudulently.
To ensure your rights are protected and to explore potential legal options, fill out the form with Class Action U to connect with a lawyer who specializes in data breach cases. There’s no obligation to take action beyond the initial consultation.
Affected by the Adidas Data Breach?
If you have received a data breach notification from Adidas or believe your information was compromised in this incident, you may be eligible to file a lawsuit for compensation. Affected individuals may be entitled to financial restitution for the harm caused by the breach, especially if their personal or financial data was exposed.
At Class Action U, we connect you with experienced attorneys who are ready to help you navigate the legal process and hold companies like Adidas accountable for their negligence in protecting consumer data.
Contact us at today and we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received a notice, or believe you were impacted, the time to act is now. There is no cost to reach out to our legal partner, and no obligation to do anything after speaking with someone from our team. Your rights matter—take action today.
