Ordered something from JD Sports? Hackers might have your data.

The data theft started in 2018 and lasted until late 2020.
 By 
Stan Schroeder
 on 
JD Sports
The data theft started in 2018 and lasted throughout 2020, but we're only finding about it now. Credit: Bloomberg / Getty Images

JD Sports isn't having a particularly good day, and neither do the sports retailer's customers.

The company said that personal data from 10 million customers "may have been accessed" by hackers, the BBC reported Monday. The data is related to online orders made between November 2018 and October 2020, from JD Sports' brands JD, Size?, Millets, Blacks, Scotts, and Millets Sport. It includes names, addresses, email accounts, phone numbers, order details, and the final four digits of bank cards.

The silver lining, according to JD Sports, is that hackers did not access full payment card details. The company also doesn't believe that account passwords were accessed by hackers.


You May Also Like

"We want to apologise to those customers who may have been affected by this incident," said Neil Greenhalgh, chief financial officer of JD Sports. The company said it was contacting customers who may have been affected by the hack, telling them to "be vigilant about potential scam emails, calls and texts."

There's no word on why it took well over a year to discover the hack and make it public.

The UK's Royal Mail was recently hit by a ransomware cyberattack, with hackers threatening to publish stolen customer data online. And just days ago, some 35,000 PayPal users were hit by a cyberattack in which hackers accessed users names, postal addresses, and tax identification numbers, among other data.

Topics Cybersecurity

Stan Schroeder
Stan Schroeder
Senior Editor

Stan is a Senior Editor at Mashable, where he has worked since 2007. He's got more battery-powered gadgets and band t-shirts than you. He writes about the next groundbreaking thing. Typically, this is a phone, a coin, or a car. His ultimate goal is to know something about everything.

Mashable Potato

Recommended For You
Iran-linked hackers launch cyberattack against U.S. medtech company Stryker
Stryker logo on medical equipment

NYT Connections Sports Edition today: Hints and answers for January 4, 2026
A phone displaying the New York Times game 'Connections.'

NYT Connections Sports Edition today: Hints and answers for January 5, 2026
A phone displaying the New York Times game 'Connections.'

NYT Connections Sports Edition today: Hints and answers for January 6, 2026
A phone displaying the New York Times game 'Connections.'

NYT Connections Sports Edition today: Hints and answers for January 7, 2026
A phone displaying the New York Times game 'Connections.'

More in Tech
The Earth is glowing in new Artemis II pictures of home
One half of the Earth is seen floating in space through the open door of the Orion spacecraft.

Doomsday Clock now closest to midnight ever
A photograph of the Doomsday Clock, stating "It is 85 seconds to midnight."

Hurricane Erin: See spaghetti models and track the storm’s path online
A map showing the predicted path of Tropical Storm Erin.

Tropical Storm Erin: Spaghetti models track the storm’s path
A prediction cone for Tropical Storm Erin.

NASA to build a nuclear reactor on the moon by 2030, report states
The lunar surface.

Trending on Mashable
NYT Connections hints today: Clues, answers for April 3, 2026
Connections game on a smartphone

Wordle today: Answer, hints for April 3, 2026
Wordle game on a smartphone

What's new to streaming this week? (April 3, 2026)
A composite of images from film and TV streaming this week.

Google launches Gemma 4, a new open-source model: How to try it
Google Gemma

NYT Strands hints, answers for April 3, 2026
A game being played on a smartphone.
The biggest stories of the day delivered to your inbox.
These newsletters may contain advertising, deals, or affiliate links. By clicking Subscribe, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up. See you at your inbox!