Cyber Threats in the Sports Industry: A Lucrative Target for Hackers

Strategic Insights -

The world of professional sports, particularly in the Premier League, has become a lucrative target for hackers, with the industry experiencing a high incidence of cyber security breaches. A recent report by the National Cyber Security Centre (NCSC) highlights the growing threat of cyber attacks in the sports industry, with at least 70% of sports institutions suffering a cyber incident every 12 months. The report's findings shed light on the severity of the issue, with numerous instances of hacking, phishing scams, and ransomware attacks affecting various sports organizations.

Key Takeaways:

  • A Premier League football club narrowly avoided losing £1 million due to a phishing scam, where the managing director entered his credentials into a spoofed Office 365 page operated by hackers.
  • The incident is similar to a successful phishing scam against Italian club Lazio in 2018, which resulted in €2 million being lost to scammers.
  • At least 70% of sports institutions suffer a cyber incident every 12 months, more than double the average of UK businesses.
  • A ransomware attack on a football club's stadium encrypted IoT devices, resulting in the loss of locally stored data and the shutdown of turnstiles, which would have led to the postponement of a fixture.
  • The club was asked to pay 400 Bitcoin to restore its systems, but ultimately refused.
  • Phishing scams using spoofed accounts have led to financial losses, including £15,000 from staff members at a racecourse and an average of £10,000 per incident.
  • Around 30% of incidents caused direct financial damage, with the biggest single loss being £4 million.

Statistics:

  • At least 70% of sports institutions suffer a cyber incident every 12 months.
  • The average financial loss per incident is £10,000.
  • Around 30% of incidents caused direct financial damage.
  • The biggest single loss was £4 million.
  • 400 Bitcoin was demanded from a football club to restore its systems after a ransomware attack.
  • £15,000 was lost to staff members at a racecourse due to a phishing scam.
  • 70% of sports institutions suffer a cyber incident every 12 months, more than double the average of UK businesses.

Sources:

  • National Cyber Security Centre (NCSC) report: "The Cyber Threat to Sports Organisations"
  • CNN article: "Premier League football club narrowly avoids losing £1 million in transfer scam"
  • BBC News article: "Ransomware attack on football club shuts down stadium"
  • Syndigate Media Inc. report: "Phishing scams using spoofed eBay account manage to pull in approximately £15,000 from staff members at a racecourse"