A hacker accessed parts of AFC Ajax’s IT systems and viewed email addresses for a few hundred fans. Journalists tipped off by the attacker demonstrated tickets could be transferred or disabled and stadium-ban records modified. They said the flaws exposed or affected up to 42,000 season tickets and data tied to over 300,000 accounts; fewer than 20 banned individuals had names, emails and birth dates viewed.
Part of the PlainSec briefing for 2026-03-27