Third-party hack probed by Adidas amid data theft assertions

Adidas has launched an investigation into a potential data breach at one of its independent licensing partners after a threat actor purporting to be the Lapsus$ Group claimed to have pilfered data from the leading athletic apparel and footwear company's extranet earlier this week, The Register reports.

Despite the attacker's claims of stealing 815,000 rows of data that allegedly include names, email addresses, passwords, birthdates, company names, and other technical information, Adidas disclosed that there has been no evidence suggesting the breach of its IT infrastructure, e-commerce platforms, and customer data. Additional details regarding the data security incident remain unclear.

Such a development comes months after Adidas reported having its customers' data exfiltrated following an intrusion against an external customer service provider. Hacking collective Scattered Lapsus$ Hunters, which Lapsus$ had formed with Scattered Spider and ShinyHunters in August, also claimed to have pilfered over 20 million records from Adidas two years ago.