Dutch football club Ajax hid data breach after report from ethical hacker
Briefly

Dutch football club Ajax hid data breach after report from ethical hacker
"In 2017, Rasnab gained access to the Amsterdam club's ticketing system, which was then operated in collaboration with Eventim. Through that system, he was able to view personal data of fans and employees, including data on club icon Sjaak Swart."
"According to Rasnab, that interaction took place under pressure. He claims he felt intimidated and that it was not an equal conversation. Ultimately, he signed the agreement."
"This year, Rasnab again discovered vulnerabilities in Ajax's digital systems. The club has been working with ticket provider Secutix since 2021. According to the hacker, through those systems he was able to view not only season ticket holders' data, but also internal emails and information regarding stadium bans."
"When he informed the club about this, he claims he was referred to the earlier non-disclosure agreement. In an email, Ajax reportedly warned him of possible legal action if he attempted to gain access again or approached employees."
In 2017, Ajax experienced a significant data breach when ethical hacker Abdoul Rasnab accessed their ticketing system, revealing personal data of fans and employees. After reporting the breach, Rasnab was pressured into signing a non-disclosure agreement. In 2024, Ajax apologized and compensated him. Rasnab later discovered new vulnerabilities in Ajax's systems and reported them, but was warned of legal action for his previous agreement. He subsequently made the breach public, leading Ajax to file a police report against him.
Read at Techzine Global
Unable to calculate read time
[
|
]