Recent cyber attack on Adidas: lessons learned and how your company can protect itself

In May 2025, the renowned sports brand Adidas confirmed that it suffered a cybersecurity incident that has exposed personal data of a significant number of its customers. This case, involving an external service provider, brings a growing problem back to the table: cybersecurity risks in the supply chain.

‍

Adidas: data leak through a third party

According to the official statement, the unauthorized access occurred through an external provider that manages part of the customer service. The leaked information includes:

• Names and surnames
• E-mails
• Telephone numbers
• Gender and dates of birth

The company has been clear in stating that no financial information or passwords have been compromised. Even so, the exposed data can be used in phishing, social engineering or impersonation attacks (online fraud).

‍

What did Adidas do after the incident?

Faced with the breach, the company activated its response protocol:

• Compromised access was isolated.
• An internal investigation was launched and external cybersecurity experts were involved.
• Affected users and appropriate authorities were notified.

Although Adidas has responded quickly, this episode once again highlights how vulnerable even global brands can be to these types of threats.

‍

What can we learn from this case?

This is not an isolated incident. Recent cases such as the cyberattacks on El Corte Inglés or Santillana show a pattern: attackers are exploiting the weaknesses of third-party vendors to join large organizations.

Key lessons for any company:

• Regularly audit digital systems and providers
• Require minimum cybersecurity certifications and measures from all partners
• Have a system of 24/7 monitoring
• Continuously train internal teams to detect threats

Nowadays, an external vendor with a breach can compromise your entire operation.

‍

Is your company truly protected?

In Apollo Cybersecurity we work every day so that cases like Adidas don't happen again in your company. Our proactive and strategic approach allows us to anticipate threats and strengthen our clients' defenses, regardless of size or sector.

‍

Protect your organization with solutions designed for today's reality:

🔐 SOC as a Service: continuous monitoring and incident response
🛡️ Pentesting and Vulnerability Analysis
🎓 Cybersecurity training for teams and managers
📋 CISO as a Service: design your security strategy with experts

👉 Request a free audit and discover how to protect your company before it's too late:
www.apolocybersecurity.com/solutions

‍