CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Ajax Amsterdam systems breach enables ticket manipulation and limited fan data exposure

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

A threat actor exploited vulnerabilities in Ajax Amsterdam’s IT systems to access limited fan data and manipulate ticket assignments and stadium bans. The incident affected a few hundred individuals, with fewer than 20 stadium bans compromised, including names, email addresses, and dates of birth. The attacker demonstrated the ability to reassign season tickets and modify existing stadium bans before disclosing the flaws to media outlets. The club has patched vulnerabilities, engaged external investigators, and notified Dutch authorities. No evidence of data leakage has been identified.

Timeline

  1. 26.03.2026 22:37 1 articles · 2h ago

    Ajax Amsterdam discloses breach enabling ticket and stadium ban manipulation

    AFC Ajax disclosed that a threat actor exploited vulnerabilities in its IT systems to access limited fan data and manipulate season ticket assignments and stadium bans. The incident affected a few hundred individuals, with fewer than 20 stadium bans compromised, and demonstrated the ability to reassign tickets and modify bans via exposed APIs. The club has patched vulnerabilities, introduced additional security measures, and engaged external experts to assess the incident. Dutch authorities have been notified.

    Show sources
    Open in new tab

Information Snippets