Sportmaster

Sportmaster operates more than 400 stores operating under the Sportmaster and Austin brands, offering customers in 130 cities a range of sports and outdoor products.

Performance indicators

2023: Revenue growth by 14.3% to RUB 159.55 billion

Sportmaster's revenue in 2023 amounted to 159.55 billion rubles against 139.6 billion rubles a year earlier (an increase of 14.3%; these and other indicators are given in accordance with Russian Accounting Standards/RAS/). The company's net profit in comparison with the same segments of time increased from 22.93 billion to 23.12 billion rubles. This is evidenced by the data of the Kontur. Focus service, which TAdviser got acquainted with in May 2024.

It follows from these materials that the cost of sales of Sportmaster in 2023 reached 69.89 billion rubles, an increase from 58.39 billion rubles in 2022. The retailer's gross profit increased from 81.22 billion to 89.66 billion rubles, and profit from sales decreased from 31.76 billion to 30.25 billion rubles.

𝓲

Unsplash

Sportmaster's commercial expenses in 2023 amounted to 59.41 billion rubles, which exceeds the same costs a year ago at 49.47 billion rubles. The company's accounts payable in 2023 amounted to 45.67 billion rubles against 36.46 billion rubles a year earlier. Accounts receivable decreased from 15.51 billion to 12.71 billion rubles.

As noted by the Telegram channel RatailFashion, Sportmaster has become the largest Russian fashion retailer in terms of revenue for 2023. In addition, the company had the largest advertising budget among all brands in the first 8 months of the year - 1.2 billion rubles. In 2023, the network was developing omnichannel to increase the number of online purchases through the application.

In 2023, Sportmaster announced plans to open 96 of its own stores and rely on development in cities with a population of up to 50 thousand people, as well as launch about 250 small stores according to the franchise model.

History

2023

Data leakage of 260 thousand customers in Kazakhstan

On January 11, 2023, it became known about a major leak of personal data of Sportmaster customers in Kazakhstan. According to the local computer incident response service KZ-CERT, the company is conducting an internal investigation into the incident.

Sportmaster confirmed the leak, noting that the incident does not affect user logins and passwords, payment information, as well as employee credentials. According to the preliminary version, the leak could have occurred from one of the contractors who had access to this information, the statement said.

According to the regulator, the merged file contains names, dates of birth, phone numbers and email. The data are relevant for the period from September 15, 2012 to May 18, 2018. The database includes information about more than 260 thousand Kazakhstani clients of Sportmaster.

The data of 260 thousand Sportmaster customers in Kazakhstan were stolen by attackers

The information obtained as a result of the leak can be used by attackers in social engineering, namely, when making calls and sending phishing messages in order to obtain confidential and banking data, KZ-CERT warned. They also added that attackers can use the same information when hacking the pages of users on social networks who have not connected two-factor authentication.

In 2023, a series of high-profile leaks continued, which began a year earlier. users of various services from Russian companies. Fines for these leaks are under Part 1 of Art. 13.11 of the Administrative Code of the Russian Federation (for violation of legislation in the field of personal data) from 60 thousand rubles to 100 thousand rubles. In fact, personal data operators now do not risk anything if thousands or more of users lose databases.

Companies, after confirming the fact of leaks, do not pay compensation to affected users. Roskomnadzor believes that customers of companies affected by the compromise of personal data have the right to demand proportionate compensation from the guilty person both in pre-trial and in court.^[1]

Recognition of a data breach

On January 1, 2023, Sportmaster recognized the leakage of customer data. The merged database included 1.6 million records.

As the representative of the retailer told TASS, the leak did not affect the logins and passwords of users of the retail network, payment information, as well as the credentials of employees. He added that the data that got on the Web could be from 2019.

"Sportmaster" admitted the leakage of customer data. The merged database includes 1.6 million records

According to preliminary data from an internal investigation, the leak occurred through one of Sportmaster's contractors, who had access to personal data, a company spokesman said. Sportmaster strengthened security measures after the incident and added: "As part of the security work, access is already significantly limited, except for those necessary to ensure the operability of the company's services."

"Sportmaster" notified Roskomnadzor about the data leak. The results of an internal investigation will eliminate vulnerabilities in data protection to avoid repeated leaks, a retailer spokesman told the agency.

On the evening of December 31, 2022, the NLB hacker group announced that it had managed to gain access to Sportmaster's customer database, which contains about 400 million lines. Hackers posted a small part of the information in the public domain. Later that day, the Telegram channel Data1eaks confirmed the data leak. A database containing more than 1.6 million lines got into the Web. The database contains names, dates of birthdays, gender, customer and email addresses. In addition, the database also contains almost 1.2 million unique phone numbers.

Roskomnadzor said on January 1, 2022, that the department was checking information about the leakage of personal data of Sportmaster customers. The department noted that the company did not notify the regulator about the incident on time.^[2]

2022: Go Sport network closes in Poland

Sportmaster closes the Go Sport sporting goods chain in Poland due to sanctions. This became known in mid-June 2022. Read more here.

2020: Part of employees move to iGooods for the duration of the pandemic

On April 10, 2020, it became known that the iGooods grocery delivery service began cooperation with a number of chain restaurants and stores under a staff exchange program during the coronavirus pandemic. Employees of Teremka, Bush, Sportmaster and taxi company 068 have already switched to work at iGooods as personal buyers and couriers. Read more here.

Notes