English Premier League football club West Ham United accidentally leaked the personal data of supporters on its official website.
The exposed information including full names, dates of birth, telephone numbers, addresses, and email addresses of its supporters was shown on the site when someone attempted to log into their accounts on the club’s ticketing website.
The club cited it as a technical issue and worked with the third-party service provider to resolve it.
Source: https://www.infosecurity-magazine.com/news/west-ham-supporters-personal/
TPRM report: https://scoringcyber.rankiteo.com/company/west-ham-united
"id": "wes153224522",
"linkid": "west-ham-united",
"type": "Breach",
"date": "03/2021",
"severity": "90",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Sports',
'location': 'London, UK',
'name': 'West Ham United',
'type': 'Football Club'}],
'attack_vector': 'Technical Issue',
'data_breach': {'personally_identifiable_information': ['full names',
'dates of birth',
'telephone numbers',
'addresses',
'email addresses'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information']},
'description': 'West Ham United accidentally leaked the personal data of '
'supporters on its official website.',
'impact': {'data_compromised': ['full names',
'dates of birth',
'telephone numbers',
'addresses',
'email addresses'],
'systems_affected': "Club's ticketing website"},
'response': {'third_party_assistance': 'Third-party service provider'},
'title': 'West Ham United Data Leak',
'type': 'Data Leak'}