Amateur athletes' data stolen in AllUnited data breach

A software vulnerability at AllUnited led to a massive data breach affecting 35 sports federations, including the Royal Dutch Cricket Association. Attackers stole personal details of amateur athletes, such as names, addresses, contact information, and bank account numbers, prompting clubs to warn their members about potential misuse.
A significant data breach at the software provider AllUnited has compromised the personal information of numerous amateur athletes. The incident occurred on Monday evening when an unauthorized attacker exploited a software vulnerability to copy the contents of the company's entire database. The breach was discovered and addressed by Tuesday, but not before sensitive information belonging to members of 35 different sports federations, including the Royal Dutch Cricket Association, was accessed.
The stolen data potentially includes full names, residential addresses, dates and places of birth, email addresses, and telephone numbers. Furthermore, cybercriminals may have obtained IBAN bank account details and login credentials for users with active AllUnited accounts. Sports clubs are currently notifying their members about the incident, warning them that the leaked information could be misused by malicious actors for fraud or identity theft. Authorities are investigating the breach while affected organizations work to secure their systems and inform those impacted by the security failure.
Based on reporting by nu. Translated and condensed by LocalHeadlines.


