AllUnited cyber-attack exposes Dutch sports club members' data
An attacker exploited a software flaw in AllUnited, a Dutch sports club membership management platform, to copy its membership database. The exposed information included names, addresses, dates of birth, passwords and bank account details. The company began resetting all passwords, and more than 350 sports clubs reported the breach to the data protection regulator.
Key facts
- Affected organisation
- AllUnited
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- More than 350 sports clubs reported the breach; members' personal information and bank account details were exposed
- Cause / method
- A software flaw in sports club registration forms was exploited to copy the membership database
- Location
- Netherlands
If your data was exposed
Exposed dataNameAddressDate of birthBank accountUsernamePassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The copying of the membership database through exploitation of an AllUnited software flaw and the reset of all passwords became public.
- More than 350 sports clubs reported the breach to the data protection regulator, and no signs of misuse of personal information were identified.
Also affected by this incident
AllUnited hack exposes De Zoutkeet club members’ data
↳ Knock-on damage from the AllUnited incident · View original incidentImpact: Club members’ information exposed
A cyber-attack on Dutch membership management service AllUnited exposed member information from the De Zoutkeet draughts club in Hilversum. Data affected across AllUnited included names, addresses, dates of birth, telephone numbers, passwords and bank account numbers, but the article did not specify which data fields were exposed for this club or how many members were affected. The club was notified on the morning of 11 November and advised members to change their passwords.
Read on NH Nieuws ↗
6 related reports
- AllUnited Breach Exposes Member Data, Including IBANs
- Hundreds of Dutch sports clubs report cyberattack exposing members' personal data
- AllUnited Confirms Data Breach Exposing Members of Dutch Sports Clubs and Federations
- More than 350 sports clubs report AllUnited data breach
- AllUnited breach: 350+ Dutch sports clubs report data leak
- Geen signalen van misbruik persoonsgegevens na lek bij AllUnited
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.