Dick’s Sporting Goods Discloses Data Exposure by Cybersecurity Incident

Dick's Sporting Goods, a major U.S. retailer, reported a cybersecurity incident involving unauthorized third-party access to its information systems on August 21, 2024.

According to a recent filing with the U.S. Securities and Exchange Commission (SEC), the breach exposed parts of its system containing confidential information. However, the company stated that there was no indication the attack disrupted business operations.

Upon discovery, Dick's activated its cybersecurity response plan, engaged external cybersecurity experts, and notified federal law enforcement. An investigation is underway, though the company does not consider the incident material at this time. The company reassured stakeholders that if significant developments arise, they will reassess the situation in line with SEC regulations.

Headquartered in Coraopolis, Pennsylvania, Dick's Sporting Goods is one of the largest sports retailers in the United States. Founded in 1948, the company operates more than 850 stores nationwide, offering a wide range of sporting goods, including equipment, apparel, footwear, and outdoor gear.

The company also owns other retail brands, including Field & Stream and Golf Galaxy, solidifying its significant presence in the retail sports industry. With its $0.01 par value common stock traded on the New York Stock Exchange under the ticker “DKS,” Dick's Sporting Goods holds a commanding position in the U.S. market, generating billions of dollars in annual revenue.

This recent cybersecurity breach reflects the growing risks retailers face in the digital era. Although Dick's Sporting Goods reports that no critical operations were impacted, it continues to investigate the full scope of the breach and its potential repercussions. The company has yet to disclose specific details about the types of data compromised, whether customers are impacted, or how the unauthorized access occurred.

CyberInsider has contacted Dick’s Sporting Goods to learn more about the cybersecurity incident and whether it impacts customers, and we will update our post with their response when we receive it.