AllUnited to report cyberattack to police after sports data breach

AllUnited says data was stolen from its database in a cyberattack on Monday evening and that it will report the incident to police. The Dutch provider, which manages membership records for sports federations and clubs, says the breach affected organisations using its system, but the scale of the leak is not yet known.

In a statement published on Wednesday, AllUnited said an attacker exploited a software flaw to access a server through a club website’s registration form. Data copied from the database included names, addresses, passwords and bank account numbers, the company said.

AllUnited said it fixed the vulnerability on Tuesday and reported the breach to the Dutch Data Protection Authority. The company had not yet been reached for comment when the report was published.

The incident follows reports from Dutch sports federations and clubs that members’ data may have been copied in the attack. Several federations and clubs have said they were affected.