Dutch Police Arrest Suspect in Ajax Systems Hack
Summary
Dutch police arrested a 35-year-old man suspected of repeatedly hacking AFC Ajax. Ajax said flaws exposed data on hundreds and enabled ticket transfers and stadium-ban changes; RTL reported API access to over 300,000 accounts. Ajax patched the flaws.
Key points
- Dutch police arrested a 35-year-old man from Buren suspected of repeatedly accessing Ajax’s computer systems.
- Ajax said vulnerabilities exploited in the incident exposed data belonging to a few hundred people.
- Ajax said the flaws allowed ticket transfers and changes to stadium bans affecting fewer than 20 people.
- RTL reported that APIs and shared keys enabled broader access, including viewing details on over 300,000 accounts and manipulating 538 supporter bans and 42,000 season tickets.
- Ajax patched the exploited flaws and notified the Dutch Data Protection Authority and police.
Article Details
- Event Type
- Police arrest of a suspect accused of repeatedly hacking AFC Ajax’s computer systems
- Impact
- The alleged intrusions exposed data belonging to a few hundred individuals and enabled access to more than 300,000 accounts. The vulnerabilities also allowed changes to stadium bans and transfers of purchased tickets; an RTL report said the attacker demonstrated manipulating 538 bans and 42,000 season tickets. Ajax patched the vulnerabilities and notified the Dutch Data Protection Authority and police.