On May 27, according to Europa Press, Ciclogreen, the company behind an eponymous mobile app through which corporate employees can “earn rewards for recording their sustainable commutes to work by participating in fun challenges,” endured a cyberattack. One of Ciclogreen’s clients is Decathlon Spain, some of whose employee email addresses were, as the report reads, “affected.” Not affected, Decathlon Spain has told the Europa, were other personal data, passwords or customer data.

The party that has claimed responsibility for the attack is, it appears, a known threat and goes by the pseudonym 888.

“We at Decathlon Spain are investigating the incident and closely following the situation with the support of the group’s cybersecurity teams,” the company has said.