All Breaches
January 20, 2023 Verified Sensitive Record Retail

JD Sports Data Breach

In January 2023, UK sportswear retailer JD Sports (jdsports.co.uk) disclosed that unauthorized actors had accessed a system storing online customer orders placed between November 2018 and October 2020 across group brands JD, Size?, Millets, Blacks, Scotts, and Millets Sport.

10 Million
Affected People
6
Data Types
Critical
Severity
Oct 27, 2026
Last updated

Protect Yourself

Check whether you were affected by this breach

Check my email

Exposed Data Types

6
  • Names
  • Email addresses
  • Phone numbers
  • Physical addresses
  • Credit cards
  • Purchases

About This Breach

Reported to the UK Information Commissioner's Office (ICO), the breach affected approximately 10,000,000 unique customers and exposed full names, billing and delivery addresses, email addresses, phone numbers, order details, and the last four digits of payment cards.

Verification and editorial method

LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.

Report missing or incorrect information