Police arrest suspect in Ajax football club hack that exposed 300,000 fan records

Dutch police arrested a 35-year-old suspect accused of repeatedly intruding into AFC Ajax’s computer systems after the club discovered unauthorized access; the attacker exploited vulnerabilities in Ajax’s app and website (exposed APIs and shared access keys), exposing private data of more than 300,000 registered fans and potentially allowing theft or disabling of over 42,000 season tickets and disclosure of 538 supporters with active stadium bans. Authorities seized data carriers during a search, Ajax patched the issues, and the incident was reported to police and the national data protection authority.