Dutch football club Ajax has been informed of a “security incident” involving its logistics partner CEVA Logistics, which is responsible for processing and shipping orders placed in the Ajax webshop.
Ajax says it was notified of the incident last Monday. One or more “unauthorized individuals” gained access to parts of CEVA Logistics’ systems and data.
Although the Dutch soccer club doesn’t say what data may have been stolen or copied, the attackers may have exfiltrated a long list of personal data, including:
As a result of the incident, orders and returns are taking longer than usual to process.
According to Ajax, none of its systems have been affected, and the incident remains limited to CEVA Logistics’ systems.
As a precaution, all data transfers between Ajax and its logistics partner have been temporarily suspended. Once it has been established that information can be exchanged safely, all data transfers will be resumed.
“Ajax takes this incident very seriously. As a precautionary measure, we have reported the incident to the Dutch data protection authority. Together with CEVA, we are closely monitoring developments,” the Dutch football club said in a press release .
CEVA Logistics is a global logistics and supply chain company that operates in both freight management and contract logistics. The company was founded in 2007 and purchased by the CMA CGM group in 2019.
CEVA Logistics has over 1,300 locations worldwide and employs over 110,000 workers. The company generated over $18.3 billion in revenue in 2025.
Last week, bol, the largest online retailer in the Netherlands , reported that the personal information of an undisclosed number of customers may have been stolen as a result of the security incident at CEVA Logistics.
Dutch department store De Bijenkorf was also involved in a potential data breach because of an incident at an external logistics partner.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
