Ajax Football Club Hack Exposes 300,000 Fan Records, Suspect Arrested

A 35-year-old man from Buren was arrested for hacking into Ajax Amsterdam's systems, compromising data of over 300,000 fans and 42,000 season tickets. The attacker exploited vulnerabilities in Ajax's IT systems, allowing unauthorized access and manipulation of sensitive data, including stadium bans. The breach was confirmed by Ajax in March 2026, and the police began their investigation shortly after. The hacker demonstrated the ability to reassign tickets and view private information of fans with stadium bans. Ajax has since patched the vulnerabilities and notified the Dutch Data Protection Authority. The incident raises significant concerns regarding data privacy and security within sports organizations.

Key Points: • A 35-year-old man was arrested for hacking Ajax, accessing data of over 300,000 fans. • The hack exploited vulnerabilities allowing unauthorized ticket transfers and viewing sensitive fan data. • Ajax has patched the vulnerabilities and is notifying affected fans and authorities.