Leicester City FC club announced that a cyber criminal has broken into the club’s online shop and stolen fans’ financial details.
The breach potentially affected anyone who has made a purchase through shop.lcfc.com.
The information compromised includes Cardholder names, card numbers, expiry dates and CVV numbers.
The club has been in direct contact with all users that were potentially affected by this breach.
Source: https://www.itgovernance.co.uk/blog/leicester-city-fc-fans-financial-details-stolen-in-cyber-attack
TPRM report: https://scoringcyber.rankiteo.com/company/leicester-city-football-club
"id": "lei223726323",
"linkid": "leicester-city-football-club",
"type": "Breach",
"date": "06/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'All users who made a purchase '
'through shop.lcfc.com',
'industry': 'Sports',
'location': 'Leicester, United Kingdom',
'name': 'Leicester City FC',
'type': 'Sports Club'}],
'attack_vector': 'Online Shop',
'customer_advisories': 'Direct contact with all potentially affected users',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Payment Information'},
'description': 'Leicester City FC club announced that a cyber criminal has '
'broken into the club’s online shop and stolen fans’ financial '
'details. The breach potentially affected anyone who has made '
'a purchase through shop.lcfc.com. The information compromised '
'includes Cardholder names, card numbers, expiry dates and CVV '
'numbers. The club has been in direct contact with all users '
'that were potentially affected by this breach.',
'impact': {'data_compromised': ['Cardholder names',
'card numbers',
'expiry dates',
'CVV numbers'],
'payment_information_risk': 'High',
'systems_affected': ['Online Shop']},
'initial_access_broker': {'entry_point': 'Online Shop'},
'motivation': 'Financial Gain',
'response': {'communication_strategy': 'Direct contact with all potentially '
'affected users'},
'threat_actor': 'Cyber Criminal',
'title': 'Leicester City FC Online Shop Data Breach',
'type': 'Data Breach'}