DICK'S SPORTING GOODS, INC.

DICK'S Sporting Goods, Inc., a business sector entity reported a other incident to the Washington Attorney General. The organization became aware of the incident on 2024-08-21 and filed notice on 2024-09-17. 72,012 Washington residents were affected. 27 days elapsed between awareness and notification. 0 days to identify the breach. 1 days to contain the breach.

On August 21, 2024, Dick's Sporting Goods discovered unauthorized third-party access to its information systems, including portions containing confidential information. The Company activated its cybersecurity response plan, engaged external cybersecurity experts to investigate, isolate, and contain the threat, and notified federal law enforcement. The Company has no knowledge of business operations disruption and currently believes the incident is not material. Filed under Item 8.01.

A.D. Starr, a subsidiary of Dick's Sporting Goods, Inc., reported a data breach that originated from a third-party vendor. The incident, described as an external system breach (hacking), occurred on September 18, 2020, and was discovered on March 1, 2022. It affected 3,185 individuals, compromising their names and financial account or credit/debit card numbers along with security codes, access codes, or PINs. Affected individuals were notified in writing on May 23, 2022, and offered 12 months of credit monitoring and identity theft resolution services from Experian.