Thursday, April 27, 2023 at 16:54:50 China Standard Time

主题: RE: Incident unauthorized sensi3ve informa3on opened crm.sta3c.adidas.com.cn

⽇期: 2023年4⽉27⽇ 星期四 中国标准时间 16:46:15
从: Wang, Jiafei
⾄: Zhang, Chuang [External]

For sure it’s approved.

Thanks a lot
Regards
Jiafei

From: Zhang, Chuang [External] <Chuang.Zhang@externals.adidas.com>

Sent: Thursday, April 27, 2023 4:44 PM
To: Wang, Jiafei <Jiafei.Wang@adidas.com>
Subject: 转发: Incident unauthorized sensi3ve informa3on opened crm.sta3c.adidas.com.cn

Hi Jiafei

In response to this ticket, I am proposing a ticket to delete the backup data and s3 bucket:adidas-crm-prd-profile
kept by 1.0, I hope to get your approval.

Regards,
Zhang Chuang

发件⼈: Zhang, Chuang [External] <Chuang.Zhang@externals.adidas.com>

⽇期: 星期三, 2023年4⽉26⽇ 12:07
收件⼈: Li, Jason <Jason.Li@adidas.com>, Wang, Frank1 <Frank.Wang3@adidas.com>, Geng,
Jonathan <Jonathan.Geng@adidas.com>, Cheng, Kahn <Kahn.Cheng@adidas.com>, Agrawal,
Prakhar <Prakhar.Agrawal@adidas.com>, cyberdefense <cyberdefense@adidas.com>, Zhou, Silvia
<Silvia.Zhou@adidas.com>, Ding, S3ng <s3ng.ding@adidas.com>, Gu, Tingyu
<Tingyu.Gu@adidas.com>, Han, Tico [External] <Tico.Han@externals.adidas.com>, Wang, Tim
<Tim.Wang2@adidas.com>
抄送: Nieto, Carlos1 <Carlos.Nieto2@adidas.com>, Chen, Peter <Peter.Chen2@adidas.com>, Man,
Milo <Milo.Man@adidas.com>, Wang, Jiafei <Jiafei.Wang@adidas.com>, Zhu, Patrick
<Patrick.Zhu@adidas.com>
主题: 答复: Incident unauthorized sensi3ve informa3on opened crm.sta3c.adidas.com.cn

Hi Jason,
In response to the ques3ons in this 3cket, we would like to give a reply. First of all, the leaked data
are from the crm1.0 period, and they are all backup data, which are no longer current. and the
data were migrated in August 2022.

1.URL:hap://crm.sta3c.adidas.com.cn/ This domain name is no longer in use, and has been done
to correspond to the offline processing
2. for dynamodb leak informa3on inves3ga3on, is due to crm in the revamp process to migrate 1.0
data to 2.0 when the backup data to the wrong bucket, this part of the data will not have any
impact, because does not contain explicit sensi3ve informa3on
3. for sms, user, password leak is a CRM customer complaint system, this system is only to the
offline stores to submit 3ckets to the CRM use, does not contain any consumer informa3on, and

Page 1 of 5