Football Australia data leak exposes players’ contracts, fans’ personal details

• Australian players, fans and FA customers potentially affected
• FA contacts the Information Commissioner over the breach

Passports, player contracts and more have been available online for almost two years due to a Football Australia (FA) data breach which cyber security researchers say includes information on every Australian fan and customer of the governing body.

Lithuanian group Cybernews detected the leak and informed the FA, allowing football officials to plug the hole before the issue was made public on Thursday morning. The FA made contact with the Office of the Australian Information Commissioner (OAIC) regarding a potential data breach late on Thursday. The leak was identified when keys to the FA’s storage server were hard-coded into the HTML page of a FA website, according to Cybernews researchers.

Continue reading… Source: The Guardian