Super Bowl LVIII Presents a Vast Attack Surface for Threat Actors

This report assesses cybersecurity risks surrounding the upcoming Super Bowl, emphasizing how the NFL’s extensive digitization—across ticketing, fan experiences, APIs, advertising, and stadium/public infrastructure—broadens the attack surface for phishing and deepfake scams, API abuse, ransomware, data theft, and DDoS. It highlights synthetic identity fraud and invasive data collection in popular betting apps, warns about fake tickets/merchandise and malicious unauthorized streaming sites, and notes NFL preparedness via multi-agency tabletop exercises amid heightened geopolitical tensions.