Shoe Zone, a well-known footwear retailer, has suffered a cyber attack, compromising its systems and data.
- The company has engaged third-party experts to investigate and respond to the breach.
- Both the ICO and NCSC have been informed of the incident as per regulatory requirements.
- Shoe Zone’s ecommerce website remains operational despite the incident.
- The company assures affected individuals will be informed according to regulations.
The value footwear retailer, Shoe Zone, has recently experienced a cyber attack that resulted in unauthorised access to its online systems and data. This incident highlights the vulnerability of retail organisations to cyber threats and data breaches.
In response to the breach, Shoe Zone has taken immediate actions to prevent further unauthorised access. The company has employed specialist third-party consultants to carry out an investigation and create a comprehensive response plan. Additionally, the retailer has informed both the Information Commissioner’s Office (ICO) and the National Cyber Security Centre (NCSC) about the breach, as required by UK regulations.
Companies that suffer data breaches are obligated to notify the ICO within 72 hours of becoming aware of the incident. Failure to do so could result in penalties of up to £8.7 million or 2% of the organisation’s global turnover, whichever is higher.
Shoe Zone’s financial performance for the 26 weeks leading up to 30 March 2024, showed a revenue of £76.5 million, a 1.5% increase from the previous year. Despite the cyber attack, Shoe Zone has confirmed that its ecommerce website remains functional and continues to engage with its customers and suppliers. The company has also assured that any affected individuals will be notified according to relevant regulations.
An ICO spokesperson commented on the situation, stating that the agency is “aware of an incident involving Shoe Zone and is assessing the information provided.” Shoe Zone has refrained from further commenting on the matter.
The swift actions taken by Shoe Zone aim to minimise the impact of the cyber attack while continuing its business operations.
