DICK’S Sporting Items, the most important chain of sporting items retail shops in america, disclosed that confidential info was uncovered in a cyberattack detected final Wednesday.
Based in 1948, DICK’S operates 857 shops throughout america and has reported $12.98 billion in income in 2023. As of February 2024, the Fortune 500 firm employs over 55,500 individuals (18,900 full-time and 36,600 part-time).
In line with a submitting with the U.S. Securities and Trade Fee (SEC), the corporate has employed exterior cybersecurity specialists to assist comprise the security breach and assess the cyberattack’s affect.
“On August 21, 2024, the Firm found unauthorized third-party entry to its info techniques, together with parts of its techniques containing sure confidential info,” the retailer big stated.
“Instantly upon detecting the incident, the Firm activated its cybersecurity response plan and engaged with its exterior cybersecurity specialists to research, isolate, and comprise the risk.”
In line with a supply who requested anonymity to talk freely, the corporate has supplied few particulars in regards to the breach and is telling staff to not talk about it publicly or put something in writing.
The identical supply instructed BleepingComputer that electronic mail techniques had been shut down, more likely to isolate the assault, and all staff had been locked out of their accounts. IT employees is now manually validating staff’ identities on digital camera earlier than they’ll regain entry to inside techniques.
In an inside memo shared with BleepingComputer, Dick’s instructed staff that the majority of them not have entry to their techniques due to a “deliberate exercise” and that their workforce leaders will contact them through private electronic mail or textual content for additional directions.
In as we speak’s SEC submitting, the Fortune 500 retailer says it has additionally reported the breach to related legislation enforcement authorities and that, for the second, the incident had no affect on the corporate’s operations.
“The Firm has additionally notified federal legislation enforcement. The Firm has no information that this incident has disrupted enterprise operations,” DICK’S added.
“The Firm’s investigation of the incident stays ongoing. Based mostly on the Firm’s present information of the info and circumstances associated to this incident, the Firm believes that this incident isn’t materials.”
A DICK’S spokesperson was not instantly accessible for remark when contacted by BleepingComputer earlier as we speak.
