Hacked? Us and Sheffield Wednesday

[Mr Popodopolous]

I don't usually post links from such a publication but there is an article in the Daily Mail.

Apparently Championship Clubs are scrambling to tighten their security, us and Sheffield Wednesday were mentioned.

Edited September 25 by Mr Popodopolous

[Bristol Rob]

3 minutes ago, Mr Popodopolous said:

I don't usually post links from such a publication but there is an article in the Daily Mail.

Apparently Championship Clubs are scrambling to tighten their security, us and Sheffield Wednesday were mentioned.

Clearly. 

[Mr Popodopolous]

1 minute ago, Bristol Rob said:

Clearly. 

I have before but certain publications I won't now. Even when football or FFP related..

Found it when looking for something else.

Edited September 25 by Mr Popodopolous

[Silvio Dante]

Found it:

Championship Clubs In Hacked Shocker

EFL Championship club Bristol City vowed to tighten security last night after a member of the public somehow hacked their systems and listed himself as a player of the first team squad, without any discernible ability.

Anis Mehmeti, 24, is believed to have exploited a weakness in the system where the clubs technical director routinely gave out confidential information, including passwords, in an attempt to make himself feel like a big man on Twitter. Mehmeti bypassed the normal checks such as “does he know what the **** he’s doing when in sight of the opposition goal” and “the ability to pass to a teammate in a better position” to somehow become a part of Liam Mannings squad.

An outraged Manning stated “Obviously it’s disappointing but the biggest bit for me is that our processes need to be better and the IT team need to take responsibility and up the security. A bit of time on the motherboard is no doubt needed but it’s difficult with the relentless schedule of cleaning up after Brian’s gaffes”

Asked what the club would do with Mehmeti now he was somehow listed in a championship squad, Manning replied “We’ll need to use him now obviously and take him off after 60 minutes on Sunday, no matter how the games going”

 

[downendcity]

Does this mean that Robbored cannot believe it, even when it's on the OS?

[Red Cyril 2]

1 hour ago, downendcity said:

Does this mean that Robbored cannot believe it, even when it's on the OS?

Yeah fake news 

[1960maaan]

Can't believe I dirtied myself by going onto that site, but here you go. 

 

EFL issues cyber attack warning after TWO Championship clubs are breached... as panicked teams recruit external agencies to fend off hackers

EFL clubs have been warned over recent dangerous cyber attack breaches

Some teams are now taking steps to hire external agencies to offer protection

The EFL has issued an alert to clubs following a series of cyber attacks which have seen breaches at both Bristol City and Sheffield Wednesday in recent weeks. 

Mail Sport understands such is the seriousness of the situation that panicked sides have enlisted the help of external agencies as they seek to deal with what is an increasingly troubling issue. 

Hackers are targeting many of the competition’s bigger clubs, hunting for the personal data of season ticket holders and those on email lists. Should they be successful, that information, which can include passwords, is often sold on to a variety of buyers which are thought to include organised crime networks who can then attempt to use the data to carry out a variety of scams

Earlier this month multiple emails were sent from senior officials at both the Robins and the Owls. They included links and, despite coming from official addresses, were actually the work of hackers who had managed to get into both clubs’ systems. 

The EFL quickly sent an alert to all clubs following the issues at Bristol City, warning them not to open emails from Bristol Sport chief financial officer Vicki Long.

A similar situation unfolded at Wednesday, with suspicious emails sent from the account of finance director John Redgate. Both clubs were quick to respond and raise the alarm with those impacted. 

Earlier this month, League One Charlton Athletic contacted police after they were hit. EFL bosses have told clubs that the problem is growing and urged them to increase vigilance given the sensitive data that they hold.

Leeds United appear to be among those leading the response. The club’s information security manager, Graham Peck, is creating a list of cyber security contacts at each side to ensure information is shared and to aid prompt responses. 

In May, Aston Villa launched an investigation into reports of a data breach. While they found a vulnerable area, which they then closed, they did not find evidence of unauthorised access or sharing of passwords.

[downendcity]

When the next team list is posted and shows Armstrong and Fally playing up front together, Twine at number 10 and Memehti and Williams on the bench, then we'll know we've been hacked!

[Davefevs]

Cyber attacks breaching Bristol City?

Surely, they mean counter attacks breaching Bristol City?

[Northern Red]

Should there not have been some communication to supporters about this?

[Antman]

2 minutes ago, Northern Red said:

Should there not have been some communication to supporters about this?

yes, if they have lost (our) personal data do they not have to notify?

 

 

[downendcity]

14 minutes ago, Northern Red said:

Should there not have been some communication to supporters about this?

There would have been if we hadn't been hacked. 

[SydneyCity]

Hmmm. This week I received an email from the shop saying that my order from 2023 had been dispatched. If that was part of this breach, it’s the most convincing scam I’ve ever seen. I genuinely do believe that the club shop could be that bad.

[handsofclay]

13 minutes ago, SydneyCity said:

Hmmm. This week I received an email from the shop saying that my order from 2023 had been dispatched. If that was part of this breach, it’s the most convincing scam I’ve ever seen. I genuinely do believe that the club shop could be that bad.

My partner had the same with emails from an order she made in Sept 2023 saying the items had now been despatched. Again it was this week she received these emails.

[redordead1]

19 minutes ago, handsofclay said:

My partner had the same with emails from an order she made in Sept 2023 saying the items had now been despatched. Again it was this week she received these emails.

Me too 

[SydneyCity]

36 minutes ago, handsofclay said:

My partner had the same with emails from an order she made in Sept 2023 saying the items had now been despatched. Again it was this week she received these emails.

Yep. That’s the one - September 2023 as well.

[The Bard]

1 hour ago, SydneyCity said:

Hmmm. This week I received an email from the shop saying that my order from 2023 had been dispatched. If that was part of this breach, it’s the most convincing scam I’ve ever seen. I genuinely do believe that the club shop could be that bad.

Lots of Beats fans had similar. 

[Wilksi]

Same here. Wonder what the GDPR ramifications are from this.

Another fine job PTI have done looking after the Bristol Sport IT. 

[Barrs Court Red]

I also had a string of emails.  I did wonder if something was going on at the time, but out it down to general incompetence. 

[Bazooka Joe]

11 hours ago, Davefevs said:

Cyber attacks breaching Bristol City?

Surely, they mean counter attacks breaching Bristol City?

Or maybe Cider attacks.

 

[City oz]

11 minutes ago, Bazooka Joe said:

Or maybe Cider attacks.

 

[Norn Iron]

10 hours ago, SydneyCity said:

Hmmm. This week I received an email from the shop saying that my order from 2023 had been dispatched. If that was part of this breach, it’s the most convincing scam I’ve ever seen. I genuinely do believe that the club shop could be that bad.

Thanks for posting this. My son had similar this week as well, again from an order in (December) 23.

[westonred]

Thats funny I also had a Email from Bristol Sport saying my two away shirts had been processed ready for dispatching and had a tracking reference number to follow. I didnt order these shirts

Edited September 26 by westonred

[ooRya]

Yes, had an order dispatched email as well...

[Super]

11 hours ago, SydneyCity said:

Hmmm. This week I received an email from the shop saying that my order from 2023 had been dispatched. If that was part of this breach, it’s the most convincing scam I’ve ever seen. I genuinely do believe that the club shop could be that bad.

I had the same yesterday

[Slack]

Had the same mail hopefully the club make an announcement saying nothing to be concerned about, worrying that the first we hear about this is from a newspaper article 

[Bristol Rob]

13 minutes ago, Slack said:

Had the same mail hopefully the club make an announcement saying nothing to be concerned about, worrying that the first we hear about this is from a newspaper article 

If there is a genuine concern that there has been a data breach (and the resending of emails from 2023 would suggest something has been compromised) and as the club haven't commented publicly about what has happened, then raising a question to the ICO wouldn't be unreasonable.

[Henry]

1 minute ago, Bristol Rob said:

If there is a genuine concern that there has been a data breach (and the resending of emails from 2023 would suggest something has been compromised) and as the club haven't commented publicly about what has happened, then raising a question to the ICO wouldn't be unreasonable.

Yep, I would report them. They are suppose to let individuals know without delay. 

[Bristol Rob]

10 minutes ago, Henry said:

Yep, I would report them. They are suppose to let individuals know without delay. 

The club will have a data owner (probably) or maybe even a chief data officer who should be all over this.

[Oizys]

@JerrySLO - The club surely needs to make a statement regarding this?

[Simez]

I had four emails on Tuesday relating to orders in 2023. 

[Yozzarian]

Nothing here - so far.  I wonder if this is somehow limited to those who ordered from the shop in the past?  

I've been getting legit emails from City even though I have opted out of this so in general, it's a bit of a shitshow.

 

Definitely worth not clicking on anything and updating account passwords I'd have thought.

[Henry]

2 hours ago, Steve Watts said:

@JerrySLO - The club surely needs to make a statement regarding this?

No point. He doesn’t post on here.

 

Data Protection Officer
Bristol Sport Limited
Ashton Gate Stadium
Ashton
Bristol
BS3 2EJ

Email: privacy@bristol-sport.co.uk

[MarcusX]

17 hours ago, 1960maaan said:

Can't believe I dirtied myself by going onto that site, but here you go. 

 

EFL issues cyber attack warning after TWO Championship clubs are breached... as panicked teams recruit external agencies to fend off hackers

EFL clubs have been warned over recent dangerous cyber attack breaches

Some teams are now taking steps to hire external agencies to offer protection

The EFL has issued an alert to clubs following a series of cyber attacks which have seen breaches at both Bristol City and Sheffield Wednesday in recent weeks. 

Mail Sport understands such is the seriousness of the situation that panicked sides have enlisted the help of external agencies as they seek to deal with what is an increasingly troubling issue. 

Hackers are targeting many of the competition’s bigger clubs, hunting for the personal data of season ticket holders and those on email lists. Should they be successful, that information, which can include passwords, is often sold on to a variety of buyers which are thought to include organised crime networks who can then attempt to use the data to carry out a variety of scams

Earlier this month multiple emails were sent from senior officials at both the Robins and the Owls. They included links and, despite coming from official addresses, were actually the work of hackers who had managed to get into both clubs’ systems. 

The EFL quickly sent an alert to all clubs following the issues at Bristol City, warning them not to open emails from Bristol Sport chief financial officer Vicki Long.

A similar situation unfolded at Wednesday, with suspicious emails sent from the account of finance director John Redgate. Both clubs were quick to respond and raise the alarm with those impacted. 

Earlier this month, League One Charlton Athletic contacted police after they were hit. EFL bosses have told clubs that the problem is growing and urged them to increase vigilance given the sensitive data that they hold.

Leeds United appear to be among those leading the response. The club’s information security manager, Graham Peck, is creating a list of cyber security contacts at each side to ensure information is shared and to aid prompt responses. 

In May, Aston Villa launched an investigation into reports of a data breach. While they found a vulnerable area, which they then closed, they did not find evidence of unauthorised access or sharing of passwords.

Hackers is probably doing some lifting. If people have been warned not to open an email from a specific invididual eg Vicki then I imagine she's fallen foul of a phising scam.

15 hours ago, SydneyCity said:

Hmmm. This week I received an email from the shop saying that my order from 2023 had been dispatched. If that was part of this breach, it’s the most convincing scam I’ve ever seen. I genuinely do believe that the club shop could be that bad.

Yep I had this too on Tuesday, my order was July 23. Was expecting a follow up to confirm this was nonsense but nothing since.

2 hours ago, Bristol Rob said:

If there is a genuine concern that there has been a data breach (and the resending of emails from 2023 would suggest something has been compromised) and as the club haven't commented publicly about what has happened, then raising a question to the ICO wouldn't be unreasonable.

Should be reported to the ICO within 72 hours, including communicating to affected parties.

[downendcity]

7 hours ago, City oz said:

Do they do a stronger version called well hard cider?

[MarcusX]

I’ve had a reply from the club:

Completely understand your concern but don’t worry your details/data have not been compromised.

Sorry about the email below, it was triggered in error following a system update by our retail software provider on Tuesday morning.  Some supporters have received old confirmation emails as part of that error.

[wayne allisons tongues]

18 hours ago, MarcusX said:

I’ve had a reply from the club:

Completely understand your concern but don’t worry your details/data have not been compromised.

Sorry about the email below, it was triggered in error following a system update by our retail software provider on Tuesday morning.  Some supporters have received old confirmation emails as part of that error.

Why haven’t the club passed this information on to everyone. 

[Fuber]

On 26/09/2024 at 08:43, Barrs Court Red said:

I also had a string of emails.  I did wonder if something was going on at the time, but out it down to general incompetence. 

*Gasp* Surely not?

Who am I kidding.

[MarcusX]

On 27/09/2024 at 12:27, wayne allisons tongues said:

Why haven’t the club passed this information on to everyone. 

I asked this question / suggested they should - yet to receive a reply

[Davefevs]

On 26/09/2024 at 18:11, MarcusX said:

I’ve had a reply from the club:

Completely understand your concern but don’t worry your details/data have not been compromised.

Sorry about the email below, it was triggered in error following a system update by our retail software provider on Tuesday morning.  Some supporters have received old confirmation emails as part of that error.

Flyers supporters had the same fault too.