Sports club member data may be exposed in AllUnited breach
An unknown attacker may have copied the whole database of AllUnited, a membership system used by sports clubs, the cricket association KNCB says. Members could now receive convincing fake messages.
i
Illustrative photo: MemoryCatcher / Pixabay Content LicenseThe Royal Dutch Cricket Association (KNCB) says an unknown attacker exploited a flaw in the software of AllUnited on the evening before its statement. That may have let the attacker copy all the data in the database. According to the KNCB, AllUnited noticed the leak on the day of the statement and fixed it.
The breach may affect all associations that use AllUnited, not only cricket clubs. For members, that means names, addresses, towns, email addresses, phone numbers, and dates and places of birth.
Bank details may also have been taken, along with the login details of people who have an AllUnited account.
Other details such as membership numbers and teams may have been stolen too. Where users are parents or guardians, their children's data may be affected as well.
The KNCB warns members that criminals could use the information to create messages that look just like ones from their club or bank. People may fall for these more easily than for "a sloppy spam email", the association said.
The cricket association is one of the organisations that has told its members about the leak. Its statement describes the exposure as a possibility, not a confirmed theft of every record: the data "may" have been copied, it says.
More on digital, tech and privacy · crime and the courts
See more of NLnow in Google: add it as a preferred source