Breach taxonomy
Summary
On August 21, 2024, DICK'S Sporting Goods discovered unauthorized third-party access to its information systems, including portions containing certain confidential information. The company activated its cybersecurity response plan, engaged external cybersecurity experts, and notified federal law enforcement. No disruption to business operations was reported. The company determined the incident was not material as of the filing date. Filed under Item 8.01; materiality not yet determined as of filing date.
Tagging rationale
ThreatUnknown
Filing does not attribute the incident to any specific threat actor → UNKNOWN.
MethodsData Exfil
Filing confirms unauthorized third-party access to systems containing confidential information — data access/exfiltration.