DICK’S Sporting Goods discovered unauthorized access to its information systems on August 21, 2024. The company determined on or around August 26, 2024, that information had been acquired. The notice states that the company terminated the unauthorized access, remediated affected systems, began an internal investigation, and reported the incident to federal law enforcement and certain state regulators, although the dates of those reports were not provided.
The information involved may have included customer names, addresses, email addresses, phone numbers, and, in some instances, dates of birth. The notice states that Social Security numbers, financial information, and other sensitive information were not affected, and it does not identify medical information. The notice does not state the number of affected individuals or the states in which affected individuals resided. Consumer notification occurred on September 17, 2024; further incident details may emerge as records are updated.