Sports and fashion retailer JD Sports Fashion has been the victim of a cyber attack which saw customer data relating to historical online orders compromised, it said today.
The group said the affected data was "limited", as it does not hold full payment card data and did not believe account passwords were accessed.
The attack related to online orders placed for the JD, Size?, Millets, Blacks, Scotts and MilletSport brands between November 2018 and October 2020.
JD Sports said information that may have been accessed consisted of the name, billing address, delivery address, email address, phone number, order details and the final four digits of payment cards of about 10 million customers.
The group apologised to customers and is contacting those affected to advise them to be vigilant to the risk of fraud and phishing attacks.
It is also investigating the incident, working with cyber security experts and engaging with the UK's Information Commissioner's Office (ICO), the UK's data protection watchdog.
JD Sports has a large presence in Ireland.
The company declined to comment when asked if the data of any Irish customers was compromised by the cyberattack.
A spokesperson told RTÉ News that they had nothing to add beyond what was contained in the statement issued by the company.
It is understood that most of the impacted customers are in the UK.
Cyber attacks on UK companies are becoming increasingly common.
Earlier this month the Royal Mail's export services were severely disrupted by what it described as "a cyber incident."
Additional reporting by Brian O'Donovan
