Adidas Korea Data Breach 2025 | Customers' Personal Information Exposed via Third-Party Vendor

Key takeaways

• The breach came through an external customer-service provider, not Adidas Korea's own core systems.
• Exposed data included names, emails and phone numbers, so expect targeted phishing rather than direct account takeover.
• Customers should change reused passwords and treat unexpected calls or texts about orders with suspicion.

Table of Contents

• What Happened?
• The Role of the Third‑Party Vendor
• Industry Context: Dior Breach the Week Before
• What Are the Recommendations for Affected Customers?
• What Are the Broader Takeaways for Retail Cybersecurity?
• Key Takeaways

Adidas Korea confirmed a security incident that leaked personal data belonging to customers who contacted the company’s service centers in or before 2024. The sportswear brand says the intrusion originated at a third‑party customer‑service provider, marking the second high‑profile breach of a luxury or fashion label targeting Korean consumers in the same month.

What Happened?

Adidas posted a disclosure on May 16 2025 explaining that unknown actors accessed customer records stored at an external support partner. Although the breach did not expose payment cards or passwords, it did reveal:

• Names

• Email addresses

• Phone numbers

• In some cases, birthdates and physical addresses

The company completed direct notifications to all Korean customers whose information was involved and reported the incident to local regulators.

The Role of the Third‑Party Vendor

Early evidence suggests the attackers did not penetrate Adidas corporate systems directly. Instead, they broke into the environment of a contracted customer‑service firm that handled inbound email and phone inquiries. Supply‑chain breaches like this bypass the primary brand’s defenses and remain difficult to spot until data surfaces elsewhere.

Ongoing Response

Adidas states it is:

• Working with external information‑security specialists to investigate

• Enhancing vendor‑risk assessments and monitoring

• Implementing stricter data‑segmentation controls for support contractors

Korean authorities have been notified, and a full audit is underway.

Industry Context: Dior Breach the Week Before

Only days earlier, Dior admitted that personal data, including purchase histories, was stolen from its Korean customer database. Dior discovered the breach in May but took several months to alert victims, drawing scrutiny from Korea’s Internet & Security Agency (KISA). Together, these incidents highlight a growing pattern: global fashion brands face mounting pressure to protect localized customer data as cyber‑criminals seek rich behavioral details for spear‑phishing and fraud.

What Are the Recommendations for Affected Customers?

• Stay alert for phishing emails or texts that reference Adidas orders or ask for additional information.

• Review accounts for unfamiliar activity; report suspicious messages immediately.

• Consider rotating passwords on unrelated services if similar credentials were reused.

• Enable multi‑factor authentication wherever possible to reduce downstream risk.

What Are the Broader Takeaways for Retail Cybersecurity?

• Third‑party risk is now one of the largest exposure points for consumer brands.

• Even “non‑financial” data, names, phone numbers, purchase histories, has high black‑market value.

• Transparency and rapid notification can help mitigate reputational damage and regulatory penalties.

Conclusion

The Adidas Korea breach shows that supply‑chain security is no longer optional for global retailers. As attackers shift focus from direct card theft to detailed consumer profiling, every vendor that touches customer data becomes part of the company’s overall attack surface. Continuous audits, strong contractual controls, and swift disclosure remain essential to maintaining trust in an increasingly interconnected retail ecosystem.

Related reading

• Microsoft Suspends 3,000 Outlook and Hotmail Accounts Linked to North Korean IT Worker Scam Posing as Remote Employees - 2025 Crackdown
• What is the 12-step checklist for Cloud Incident Response in 2026? step-by-step Guide
• How should companies communicate during a ransomware attack to reduce damage and panic?