English Premier League football club, West Ham, has suffered an accidental data breach with personal information of supporters leaked via the clubs official website. Having first been reported by Forbes, error messages were being displayed on the West Ham’s website before showcasing the profile information of supporters to other fans who were attempting to log into their accounts. The data leak resulted in key fan information being left exposed and included names, dates of birth, telephone numbers, addresses and email addresses.
The error messages were linked to the clubs online ticketing service with numerous error messages being displayed including an admin message saying, “Drupal already installed”. When an individual attempted to enter their own login details, they would then be shown another West Ham fans information. This breach of information had many fans puzzled who took to the clubs official fans forum site KUMB to vent their frustration.
The Hammers, which currently sit in the top half of the premier league, issued a statement to fans via email, confirming the problem had been swiftly resolved while apologising to those affected. We are aware there was a technical issue when signing into online accounts this morning. We worked with our third-party service provider and they have already resolved this issue.”
Providing insight and commentary are the following cybersecurity experts:
Amit Sharma, Security Engineer at Synopsys Software Integrity Group
After all, ensuring the confidentiality and integrity of data is vital ..
Support the originator by clicking the read the rest link below.
