- AFC soccer governing physique reportedly compromised, exposing delicate information on over 150,000 members
- Leaked information allegedly embrace passport scans, contracts, emails, and detailed participant data
- The assault was marketed because the “largest breach in soccer historical past,” with researchers warning of fraud dangers
The Asian Soccer Confederation (AFC), the primary governing physique for soccer in Asia, has apparently been compromised after an assault noticed extremely delicate and private particulars on greater than 150,000 members uncovered to the darkish internet.
A report from Dataminr calims a menace actor posted a thread on the PwnForums market over the weekend, promoting the archive.
In it, the attackers say mentioned they dumped “the whole AFC gamers and coaches database” together with information from Al Nassr FC, the place giants like Cristiano Ronaldo, Sadio Mané, or Marcelo Brozović play. The database allegedly accommodates passport scans, contracts, emails, and AFC registration information.
Article continues beneath
You could like
Posting samples
“The mix of passport scans, verified electronic mail addresses, and participant contract information creates a extremely actionable bundle for monetary fraud, contract manipulation, and focused social engineering in opposition to among the world’s highest-earning athletes,” mentioned Jeanette Miller-Osborn, Subject Cyber Intelligence Officer at Dataminr.
The menace actor posted a couple of samples to show the authenticity of their claims, and in addition to the above, these additionally contained individuals’s full authorized names, dates of delivery, nationalities, participant positions, AFC IDs, membership names, match particulars, and venue data.
The menace actor thanked ShinyHunters for his or her assist posting the leak and described the assault as “the most important breach in soccer historical past.” Nonetheless, this individual is most probably not affiliated with the group, since Dataminr described them as a “forum-level operator leveraging the credibility of ShinyHunters,” simply to attempt to seize some cash for his or her efforts.
At press time, the AFC has not but commented on the leak.
On the identical time, the researchers urged each the AFC and its members to be cautious of incoming messages, and to assessment how they retailer athlete information.
The very best antivirus for all budgets
Our prime picks, primarily based on real-world testing and comparisons
Comply with TechRadar on Google Information and add us as a most popular supply to get our knowledgeable information, critiques, and opinion in your feeds.
