Darktrace Report Finds Widespread Cyber Incidents and Phishing in Sports

Jun 11, 2026 · Original article ↗

Summary

Darktrace’s sports-sector research reports frequent cyber incidents and elevated phishing, and highlights risks from compromised accounts, ransomware, AI use, and third-party access. It recommends visibility across IT and OT and rehearsed incident response.

Key points

A survey found 84% of professional sports organizations had at least one cyber incident in the past year; 57% reported more than one.
Darktrace detected more than 116,000 phishing emails targeting sports organizations in its customer base from October 2025 through March 2026.
The reported phishing emails included attacks aimed at VIPs and novel social engineering; 84% passed DMARC authentication.
A ransomware case involved two weeks of data movement to an external server before encryption was triggered.
The survey found 72% of respondents expected AI to increase cyber risk, while 35% said their organizations were using or planning to use AI in stadium operations.
The article recommends behavioral visibility across IT and OT, identity controls, oversight of third-party and AI access, and response exercises for live-event conditions.
The findings draw on Darktrace customer telemetry from Q4 2025–Q1 2026 and a survey of 875 cybersecurity professionals in four countries.

Article Details

Publisher: Darktrace
Report Period: Threat-research telemetry: Q4 2025–Q1 2026; survey fielded May 28–June 3, 2026
Scope: Cybersecurity threats facing the sports sector, based on Darktrace telemetry across sports-sector customer deployments and a survey of IT cybersecurity professionals.
Sample Size: Survey: 875 IT cybersecurity professionals in the US, UK, Australia, and Germany. Telemetry sample size not disclosed.
Key Statistics: 84% of surveyed professional sports organizations reported at least one cyber incident in the past year; 57% reported more than one.
From October 2025 through March 2026, Darktrace / EMAIL detected more than 116,000 phishing emails aimed at sports organizations across its customer base.
Sports customers received 19% more phishing emails than organizations in other sectors.
Of the phishing emails analyzed, 21% targeted VIPs, 37% used novel social engineering, and 84% passed DMARC authentication.
72% of surveyed security professionals expected AI to increase cyber risk over the next year; 35% were already using or planning to use AI in stadium operations.
Recommendations: Establish behavioral visibility across IT and OT, not only corporate systems.
Treat identity as a control plane; use MFA with behavioral detection.
Control third-party and AI access as carefully as access within the organization.
Rehearse incident response under live-event conditions, where decisions may need to be made within minutes.