Breaches · 172 days ago
A hacker accessed parts of AFC Ajax’s IT systems and viewed email addresses for a few hundred fans. Journalists tipped off by the attacker demonstrated tickets could be transferred or disabled and stadium-ban records modified. They said the flaws exposed or affected up to 42,000 season tickets and data tied to over 300,000 accounts; fewer than 20 banned individuals had names, emails and birth dates viewed.
2 sources covering this story
Ajax data breach exposed season tickets, supporter bans open to tampering - Help Net Security
AFC Ajax revealed a data breach after a hacker accessed its systems, exposing fan data and vulnerabilities in its ticketing system.
Ajax football club hack exposed fan data, enabled ticket hijack
Dutch professional football club Ajax Amsterdam (AFC Ajax) disclosed that a hacker exploited vulnerabilities in its IT systems and accessed data belonging to a few hundred people.
Part of the PlainSec briefing for 2026-03-27