Dick’s Sporting Goods has confirmed a recent cyberattack that led to unauthorized access of its IT systems. The breach was disclosed in an SEC Form 8-K filing dated August 21, 2024, revealing that an unnamed third party gained access to the company’s information systems. While specific details about the compromised data have not been released, the company has stated that there has been no apparent disruption to its business operations, suggesting that daily activities have continued unaffected.
In response to the breach, Dick’s Sporting Goods quickly implemented its cybersecurity response plan. The company engaged external cybersecurity experts to investigate and contain the threat and has notified federal law enforcement authorities. The immediate actions taken reflect the company’s commitment to addressing and mitigating the impact of the cyberattack.
The SEC filing indicates that, based on current knowledge and the ongoing investigation, the breach is not considered material to the company’s financial status or operations. However, Dick’s Sporting Goods has pledged to update its disclosures if new information emerges that could affect this assessment. The absence of operational disruption implies that ransomware was likely not used in the attack, as modern cybercriminals often prefer data theft and extortion methods.
As the investigation continues, stakeholders and customers will be watching for further updates on the breach’s extent and the company’s measures to bolster its cybersecurity defenses. Dick’s Sporting Goods remains focused on securing its systems and preventing future incidents, demonstrating resilience in the face of evolving cyber threats.
Reference: