Press statement

Which? responds to the news that the data of 10 million JD Sports customers could be at risk after a cyber-attack

2 min read
Press Team

Lisa Barber, Which? Computing Editor, said:

“JD Sports customers will understandably be worried that their data has fallen into the hands of hackers who might try to exploit it, so it is vital that the company provides clear and timely updates to victims and supports them in taking steps to protect themselves.

“Anyone concerned they could be affected should be wary of unexpected phone calls, emails or fake ‘customer support’ messages popping up on social media regarding the breach, as scammers might try to take advantage of it. It’s also worth keeping a close eye on bank accounts and credit reports.

“Businesses must continuously invest in data protection to keep their customers safe from cybercriminals."

ENDS

Notes to editors

Which? advice to consumers on protecting their data

  • Passwords – Always set strong passwords for your accounts and don’t use the same ones across different accounts
  • Two-factor authentication (2FA) – Wherever possible turn on 2FA to increase security, particularly if your account holds your financial information. Don’t use SMS but use an authenticator app or even a hardware token if possible. 
  • Credit card details – Don’t save your credit card details if you aren’t going to use the service regularly. Although it’s a faff to resubmit them, that’s better than having your financial information unnecessarily stored in a database that could be compromised.
  • Guest checkout – Similarly to the above, just check out as a guest if you aren’t going to use the service regularly. Only create an account if you really need to.