Ajax Data Breach Exposes Season Tickets and Fan Bans Vulnerable to Tampering
The Hack Exposes Personal Data and Stadium Bans Vulnerabilities in Ajax Football Club’s IT Systems
In a recent high-profile breach, an unauthorized party gained access to certain areas of the IT systems used by AFC Ajax, a prominent Dutch football club based in Amsterdam.
- The compromised systems included the club’s application and website, which utilize exposed APIs and shared access keys.
- Sensitive information belonging to approximately 200 individuals subject to a stadium ban was potentially compromised, including names, addresses, and dates of birth.
- Fortunately, the breach was discovered through a collaboration between the club and an investigative journalist who had been approached by the perpetrator.
