World Triathlon Data Breach Exposes Sensitive Athlete Information
Article Content
- •Hackers exploited a flaw in Metabase to access World Triathlon databases.
- •Sensitive data, including medical records of athletes, was stolen in the breach.
- •World Triathlon has engaged law enforcement and cybersecurity experts for investigation.
World Triathlon reported a data breach where hackers accessed sensitive personal information, including medical records, of athletes, coaches, and officials. The breach was caused by exploiting a security flaw in the Metabase reporting tool. Data copied includes names, email addresses, postal addresses, and medical information such as allergies and medications. The breach was identified on November 8, 2026, after complete database tables were copied on November 6. A post on a hacking forum claimed to offer the stolen data for download. World Triathlon has notified affected individuals and reported the incident to Swiss Police while engaging a cybersecurity firm for investigation. Some athletes have already experienced phishing attempts using the stolen data.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Fancy Bear, World Triathlon and CVE-2026-72898 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What type of data was stolen?
How was the breach detected?
What actions are being taken in response?
Continue Reading
APT28 Targets NATO Defense Firms with New Hookedge Backdoor The Russian espionage group APT28, also known as Swallowtail, has targeted defense contractors in two NATO countries, including a naval shipbuilder, a military aircraft engine manufacturer, and a law enforcement agency. The attacks utilized a new backdoor called Hookedge, which was first documented in August 2026.… 
2016 Presidential Campaign Hacking Overview The 2016 presidential campaign faced significant hacking incidents attributed to Russian actors, impacting the Democratic National Committee (DNC) and Hillary Clinton's campaign. Key events included a phishing attack on campaign chairman John Podesta, which allowed hackers to access sensitive emails. This…