Auckland City FC, a New Zealand-based football club, fell victim to a cyber incident where hackers seized control of its social media accounts, removing all administrative access. The attackers locked out the club’s administrators, preventing them from deleting or managing content, including potentially risky material posted on their platforms. The breach was reported to authorities (New Zealand Police, NZ Football, Oceania Football Confederation, FIFA, and Netsafe) after a client was targeted days prior, raising fears the club would be next. The club’s digital platforms remained inaccessible for at least two days, disrupting operations and communications. While no explicit data theft (e.g., financial or personal records) was confirmed, the incident caused reputational harm, operational disruption, and loss of control over public-facing channels. The club emphasized restoring security and normal operations but provided no timeline for resolution. The attack coincided with the club’s recent global media attention due to poor performances in the FIFA Club World Cup, amplifying the reputational impact.
TPRM report: https://www.rankiteo.com/company/auckland-city-football-club
"id": "auc5862158110525",
"linkid": "auckland-city-football-club",
"type": "Cyber Attack",
"date": "11/2025",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': 'Supporters/Followers (exact '
'number unspecified)',
'industry': 'Sports/Entertainment',
'location': 'Auckland, New Zealand',
'name': 'Auckland City FC',
'type': 'Sports Club (Football)'}],
'attack_vector': 'Unauthorized Access (Administrator Lockout)',
'customer_advisories': 'Supporters advised to be patient; further updates '
'promised as appropriate.',
'date_publicly_disclosed': '2023-10-02T00:00:00Z',
'description': 'The Auckland City FC social media account was hacked, with '
'administrators locked out and risque content posted. The club '
'had preemptively contacted New Zealand Police after a client '
'was targeted days earlier. The club has lost control of its '
'account for at least two days and is unable to remove the '
'unauthorized content. The incident was reported to multiple '
'organizations, including New Zealand Football, Oceania '
'Football Confederation, FIFA, and Netsafe. The club is '
'working to restore normal operations but has no timeline for '
'resolution.',
'impact': {'brand_reputation_impact': 'High (global media coverage due to '
'recent FIFA Club World Cup '
'participation; risque content posted)',
'downtime': '2+ days (ongoing)',
'operational_impact': 'Loss of control over social media; '
'inability to remove unauthorized content; '
'reputational harm',
'systems_affected': ['Social Media Account']},
'initial_access_broker': {'high_value_targets': ['Social Media Account'],
'reconnaissance_period': 'Days (club contacted '
'police after a client was '
'targeted earlier)'},
'investigation_status': 'Ongoing (account access not restored; police '
'involved)',
'references': [{'date_accessed': '2023-10-02',
'source': 'New Zealand Herald'}],
'regulatory_compliance': {'regulatory_notifications': ['New Zealand Police',
'Netsafe']},
'response': {'communication_strategy': ['Public statement on website',
'Media engagement (via Herald)'],
'incident_response_plan_activated': True,
'law_enforcement_notified': True,
'recovery_measures': ['Attempting to regain account control '
'(ongoing)'],
'remediation_measures': ['Reporting to authorities',
'Public statement on website'],
'third_party_assistance': ['New Zealand Police',
'Netsafe',
'New Zealand Football',
'Oceania Football Confederation',
'FIFA']},
'stakeholder_advisories': ['Public statement on club website',
'Media updates via New Zealand Herald'],
'threat_actor': 'Unknown Hackers',
'title': 'Auckland City FC Social Media Account Compromise',
'type': 'Account Takeover / Social Media Hack'}