Asian Football Confederation reportedly suffers massive data breach

The Asian Football Confederation (AFC) has reportedly been compromised, with sensitive data on over 150,000 members allegedly exposed on the dark web. The breach, advertised by a threat actor as the largest in football history, includes passport scans, contracts, and detailed player information, as reported by Tech Radar.

A threat actor claimed on a dark web forum to have obtained and leaked a complete database of AFC players and coaches, including data from Al Nassr FC. The leaked records reportedly contain passport scans, contracts, emails, and registration files, alongside full names, dates of birth, nationalities, player positions, and match details. Researchers from Dataminr warned that this combination of data poses significant risks for financial fraud, contract manipulation, and targeted social engineering attacks against high-profile athletes.

While the threat actor thanked ShinyHunters, Dataminr suggested this was likely a tactic to gain credibility. The AFC has not yet commented on the incident, but cybersecurity experts are urging the organization and its members to be vigilant about incoming communications and to review their data storage practices.

Source: Tech Radar