Ajax suffers major own goal as data breach hits personal info of 300,000 fans

Date:
Thu, 26 Mar 2026 10:42:14 +0000

Description:
A bug in an app allowed a hacker to view and tamper with the data, but a fix has since been implemented.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Tech Radar Pro Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news
and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. You are now subscribed Your newsletter sign-up was successful An account already exists for this email address, please log in. Subscribe to our newsletter Ajax football club suffers breach exposing sensitive fan data Ethical hacker
showed vulnerability in app affecting 300,000 accounts Flaw allowed ticket transfers, stadium ban removals, and access to personal details Ajax Amsterdam, one of the biggest football clubs in the Netherlands and across Europe, has confirmed it suffered a data breach in which it allegedly lost sensitive data on 300,000 people.

The club published a press release saying it had recently discovered a hacker unlawfully gaining access to parts of its systems. Data was viewed, the club said, adding that the hacker accessed emails of a few hundred people. Ajax also said that for fewer than 20 people who are banned from the stadium,
their names, email addresses, and birth dates were accessed. Article
continues below You may like Major telco breach sees 6.2 million users have personal info leaked - here's what we know so far Top photo ID apps leak user data - over 150,000 thought to have been affected Huge stalkerware data
breach sees 500,000 records leaked by hacktivists Hundreds of thousands of exposed fans All of the affected individuals were notified and warned about potential incoming phishing emails.

Ajax said the breach was possible because of vulnerabilities which have,
since then, been patched. The club also notified the Dutch Data Protection Authority, as well as law enforcement.

From the press release, one might conclude that only a handful of people lost data that, in many instances, is publicly available.

However, Cybernews reports that 300,000 fans actually had their personally identifiable information (PII) exposed. Citing RTL Nieuws, a local news
outlet that was first to report on the incident, the publication said an ethical hacker demonstrated the vulnerability. Are you a pro? Subscribe to
our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

He showed that he could see personal details of 300,000 fans and even tamper with their accounts, transferring season passes and match tickets to other people. He was even able to modify and remove stadium bans, potentially creating a security risk by allowing aggressive fans and hooligans back into the stands.

He said the problem was in the Ajax app, in which every user has the same digital key: By manipulating a sent data packet, you can perform actions on someone elses behalf, such as transferring a ticket, he explained.

This way, an unauthorized person could gain access to all kinds of sensitive data belonging to Ajax fans and perform actions, the hacker added. The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.



======================================================================
Link to news story: https://www.techradar.com/pro/security/ajax-suffers-major-own-goal-as-data-bre ach-hits-personal-info-of-300-000-fans


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)