England Hockey Investigates Potential Data Breach After AiLock Ransomware Claim
England Hockey, the national governing body for field hockey, is probing a potential data breach after the AiLock ransomware gang listed the organization as a victim on its leak site. The threat actor claims to have stolen 129GB of data and threatens to publish the files unless a ransom is paid.
The organization confirmed awareness of the incident in a statement to BleepingComputer, stating it is conducting a priority investigation with internal teams and external cybersecurity experts. England Hockey is also collaborating with law enforcement and relevant authorities but has not disclosed specific details due to the ongoing probe.
As the body overseeing 800+ clubs, 150,000 registered players, and 15,000 coaches, umpires, and officials, England Hockey emphasized its commitment to data security, calling the incident a top priority.
AiLock, a ransomware group first documented in April 2025, employs double-extortion tactics, encrypting files with ChaCha20 and NTRUEncrypt (appending the .AILock extension) while threatening to leak stolen data. The group pressures victims with a 72-hour response window and a five-day payment deadline, often citing privacy law violations as leverage.
While England Hockey has not confirmed the breach, the incident underscores the growing threat of ransomware attacks targeting sports organizations and their extensive membership networks.
Source: https://www.bleepingcomputer.com/news/security/england-hockey-investigating-ransomware-data-breach/
England and Great Britain Hockey cybersecurity rating report: https://www.rankiteo.com/company/england-hockey-ltd
"id": "ENG1773354268",
"linkid": "england-hockey-ltd",
"type": "Ransomware",
"date": "4/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Sports (Field Hockey)',
'location': 'England',
'name': 'England Hockey',
'size': '800+ clubs, 150,000 registered players, '
'15,000 coaches, umpires, and officials',
'type': 'National governing body'}],
'data_breach': {'data_encryption': 'Files encrypted with ChaCha20 and '
'NTRUEncrypt (.AILock extension)',
'data_exfiltration': '129GB of data allegedly stolen'},
'description': 'England Hockey, the national governing body for field hockey, '
'is investigating a potential data breach after the AiLock '
'ransomware gang listed the organization as a victim on its '
'leak site. The threat actor claims to have stolen 129GB of '
'data and threatens to publish the files unless a ransom is '
'paid.',
'impact': {'data_compromised': '129GB of data allegedly stolen'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain (ransom)',
'ransomware': {'data_encryption': 'Yes (ChaCha20 and NTRUEncrypt)',
'data_exfiltration': 'Yes (129GB of data)',
'ransomware_strain': 'AiLock'},
'references': [{'source': 'BleepingComputer'}],
'regulatory_compliance': {'regulations_violated': 'Potential privacy law '
'violations (used as '
'leverage by threat actor)'},
'response': {'communication_strategy': 'Public statement confirming '
'investigation',
'incident_response_plan_activated': 'Yes',
'law_enforcement_notified': 'Yes',
'third_party_assistance': 'External cybersecurity experts'},
'threat_actor': 'AiLock ransomware gang',
'title': 'England Hockey Potential Data Breach After AiLock Ransomware Claim',
'type': 'Ransomware'}