FIFA discloses massive hack as internal documents are leaked to press

Malicious actors targeted officials in a phishing operation unconnected to last year’s Fancy Bear attack

FIFA World Cup

FIFA (Fdration Internationale de Football Association) has admitted it sustained a massive hack in March, with officials at UEFA also targeted by a suspected phishing campaign.

Officials from the governing body admitted the hack to journalists after a FIFA Council meeting last week hosted in Kigali, Rwanda, according to the New York Times.

Advertisement - Article continues below

President Gianni Infantino said that FIFA, as well as the European governing body UEFA, had been receiving a litany of queries from reporters regarding the contents of the internal documents that had been stolen.

A handful of media organisations are set to publish a set of stories based on leaks documents imminently, with the Football Leaks group having originally obtained the material.

Officials said they suspected UEFA staff were targeted by a phishing operation that duped them into revealing their password-protected login details. But the organisation has been unable to find any traces of a hack in its systems.

FIFA said it "condemns any attempts to compromise the confidentiality, integrity and availability of data in any organization using unlawful practices", in a statement to AP.

"Of course, we are concerned by the fact that some information has been obtained illegally," it continued. There has been no official word as to how much data was accessed or stolen by attackers, or what the leaked documents contained.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

This is the second large-scale cyber attack FIFA has suffered in recent years, after the Russian-originating Fancy Bear hack in 2017 led to the publication of a list of footballers who were cleared of drug tests. This latest phishing attack is thought to be completely unrelated.

One leak revealed that 28 high-profile players including Argentinian striker Carlos Tevez and Germany's Mario Gomez had been granted exemptions to prohibited substances in order to treat legitimate conditions.

The world's footballing governing body has endured a rocky few years after being plagued by cyber issues as well as significant controversies based on allegations of high-level corruption, and the leakage of internal documents.

The FIFA World Cup 2018, hosted in Russia, was also targeted by a series of phishing campaigns, and by "cyber terrorists", who targeted both fans and officials.

Just as the competition reached its climax this summer Symantec revealed that Android device-owning supporters were being targeted by spyware in the form of a 'GoldenCup' app.

Advertisement - Article continues below

The threat of cyber attacks became so paramount that the UK's National Cyber Security Centre (NCSC) was tasked with briefing the England national football team to help them avoid being targeted by cyber criminals during the competition.

IT Pro approached FIFA for comment but did not get a response at the time of writing.

Featured Resources

Preparing for long-term remote working after COVID-19

Learn how to safely and securely enable your remote workforce

Download now

Cloud vs on-premise storage: What’s right for you?

Key considerations driving document storage decisions for businesses

Download now

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Transforming productivity

Solutions that facilitate work at full speed

Download now
Advertisement

Recommended

Visit/security/ransomware/356292/university-of-california-gets-fleeced-by-hackers-for-114-million
ransomware

University of California gets fleeced by hackers for $1.14 million

30 Jun 2020
Visit/security/cyber-security/356289/australia-announces-135b-investment-in-cybersecurity
cyber security

Australia announces $1.35 billion investment in cyber security

30 Jun 2020
Visit/cloud/cloud-security/356288/csa-and-issa-form-cybersecurity-partnership
cloud security

CSA and ISSA form cyber security partnership

30 Jun 2020
Visit/business/policy-legislation/356215/senators-propose-a-bill-aimed-at-ending-warrant-proof-encryption
Policy & legislation

Senators propose a bill aimed at ending warrant-proof encryption

24 Jun 2020

Most Popular

Visit/mobile/google-android/356373/over-2-dozen-additional-android-apps-found-stealing-user-data
Google Android

Over two dozen Android apps found stealing user data

7 Jul 2020
Visit/laptops/29190/how-to-find-ram-speed-size-and-type
Laptops

How to find RAM speed, size and type

24 Jun 2020
Visit/cloud/356260/the-road-to-recovery
Sponsored

The road to recovery

30 Jun 2020