England Hockey, the national governing body for field hockey, has launched a priority investigation into a potential data breach following claims by the AiLock ransomware gang. The threat actors listed the organization on their data leak site, alleging they had exfiltrated 129GB of data. The group has threatened to publish the stolen files unless a ransom is paid, a common tactic in ransomware extortion schemes. The organization, which oversees the sport from grassroots to elite levels, confirmed it is aware of the incident and is treating the investigation with urgency.
In a statement provided to BleepingComputer, England Hockey acknowledged the claims and detailed its response. "We are aware of an incident involving England Hockey and are currently investigating the matter as a priority," the organization stated. A representative added, "As part of this investigation, we recently became aware of a post from the group claiming to be responsible for this incident." The investigation involves collaboration between internal teams and external cybersecurity specialists to assess the validity of the claims and understand the scope of any potential breach.
The organization is also cooperating with relevant authorities, including law enforcement, as part of its incident response protocol. England Hockey plays a central role in the national sports landscape, managing over 800 clubs, 150,000 registered players, and 15,000 coaches and officials. A confirmed breach could expose sensitive personal information of this vast membership, highlighting the significant risk ransomware poses to national sports bodies and their communities.
This incident occurs amidst a busy cybersecurity landscape, marked by other significant threats. These include a new wave of attacks via the NPM package repository, critical patches from Microsoft addressing zero-day vulnerabilities, and the rise of AI-generated malware like Slopoly used in ransomware attacks. The targeting of England Hockey underscores that ransomware groups continue to view sports organizations, which often manage large amounts of member data, as lucrative targets for extortion and data theft.
