Adidas Investigates Third-Party Data Breach Following Lapsus$ Group Claims
Learn More
Тhe German sportswear multinational Adidas confirmed on February 16, 2026, that it is investigating a data breach involving an independent licensing partner and distributor for martial arts products.
The incident was disclosed after the Lapsus$ group posted stolen data on BreachForums. Тhe attackers claim to have compromised Adidas's extranet. Тhe company maintains that the breach occurred on the independent partner's isolated IT systems and did not impact Adidas's primary infrastructure.
According to the group the stolen data includes:
- First and last names
- Email addresses
- User passwords
- Dates of birth
- Company affiliations
- Internal technical data
The threat actor claims 815,000 rows of information were stolen.
The number of affected individuals is not disclosed. Adidas claims that its internal IT infrastructure, e-commerce platforms, and primary consumer databases are not affected by the incident. The company is currently investigating the scope of the breach with the third-party partner and has not confirmed the full extent of the data theft.
