The National Basketball Association (NBA) announced a data breach following a compromise at a third-party company offering a newsletter service.
With the assistance of outside cybersecurity specialists, NBA initiated an investigation into the security breach to ascertain the severity of the situation.
Although the NBA insisted that its systems were unaffected, the data breach notification provided to fans indicated that the event may have affected an undetermined number of people.
The organization claims that an unauthorized third party gained access to and copied the names and email addresses of some of its supporters. Usernames, passwords, and other information were not compromised by the data leak.
Source: https://securityaffairs.com/143693/data-breach/nba-data-breach.html
"id": "NAT41621023",
"linkid": "national-basketball-association",
"type": "Data Leak",
"date": "03/2023",
"severity": "25",
"impact": "2",
"explanation": "Attack limited on finance or reputation"