Sport 2000 sport2000.fr Sport 2000 data breach: what happened and what to do
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
In April 2024, French sporting goods brand Sport 2000 announced a data breach. About 3.2 million unique email addresses were exposed with names, phone numbers, physical addresses, dates of birth and purchases by store.
View all 13,118 breaches- Breach date
- 18 Apr 2024
- Affected
- 3,189,643
- Data exposed
- Dates of birth, Email addresses, Names, Phone numbers, Physical addresses, Purchases, Salutations
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
Sport 2000 is a French sporting goods retailer. In April 2024 it announced it had suffered a data breach, and the data was later put up for sale on a hacking forum. Have I Been Pwned (HIBP) says the data set held 4.4 million rows with 3.2 million unique email addresses, and added it on 28 August 2024.
Per HIBP, the records include email addresses, names, phone numbers, physical addresses, dates of birth, salutations and purchases made by store name. French outlet Clubic reported that the company disclosed the attack around 19 April 2024, about two weeks after a breach at Intersport. Clubic said a French group was suspected of selling the data, but no one officially claimed it, so treat that as unconfirmed.
Why this mix of data matters: a name, a home address, a phone number and a date of birth together let a scammer sound convincing. Phishing emails and text messages that mention a Sport 2000 order or store are the likely use. A date of birth also helps someone answer security questions or build an identity-theft profile, though the breach doesn't include passwords or payment cards according to HIBP.
If you shopped at Sport 2000 in France, the steps below are worth doing now. None of them take long, and most are free.
Sources checked: haveibeenpwned.com, clubic.com, consumer.ftc.gov
Last verified against the official page:
What to do if you were in it
- 1
Expect phishing and smishing about orders and deliveries
Messages that mention Sport 2000, a store or a purchase may be scams. Don't click links; go to the retailer's site directly. The FTC covers how to spot and report phishing: https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams. If you're in France, report it through the official channels too.
- 2
Be careful with calls and texts asking you to confirm details
Your phone number and date of birth were exposed. Hang up and call back on a number you look up yourself.
- 3
Watch for signs of identity misuse
Name, address and date of birth can support identity fraud. Check your bank and credit reports, and use https://www.identitytheft.gov/ for the FTC's recovery steps if you're in the US.
- 4
Change reused passwords and turn on 2FA
HIBP lists no passwords here, but if your Sport 2000 email password is reused anywhere, change it and enable two-factor authentication.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your data appears, so you know which accounts to look at first.
Frequently asked
Was I affected by the Sport 2000 data breach?
HIBP lists about 3.2 million unique email addresses. Search your email on Have I Been Pwned or run a free Serus scan.
What was exposed?
Email addresses, names, phone numbers, physical addresses, dates of birth, salutations and purchases by store, per HIBP.
Were passwords exposed?
HIBP doesn't list passwords or payment cards for this breach.
Should I change my password?
It isn't required by the listed data, but if you reuse that password elsewhere, change it and turn on two-factor authentication.
Sources
- Have I Been Pwned: Sport2000
- haveibeenpwned.com/Breach/Sport2000
- clubic.com/actualite-525045-sport-2000-victime-d-une-cyberattaque-un-gang-de-pirates-francais-soupconne-de-vendre-les-donnees-de-4-millions-de-clients.html
- consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams
- identitytheft.gov
Something wrong or out of date? Tell us and we'll re-check it.
