Dutch National Police have arrested a 35-year-old suspect from the municipality of Buren in connection with unauthorized access to the computer systems of Amsterdam football club AFC Ajax. The arrest took place on the morning of May 26, following an investigation into multiple instances of computer intrusion at the club.
The investigation began after AFC Ajax detected unauthorized access to their systems and reported the breach to authorities. According to police statements, the suspect is accused of intentionally and unlawfully entering Ajax's computer systems on multiple occasions. The breach potentially exposed personal data belonging to approximately 300,000 football fans.
While specific technical details about the intrusion method have not been disclosed, the repeated nature of the unauthorized access suggests the attacker maintained persistent access to Ajax's systems over a period of time. The scale of the breach, affecting hundreds of thousands of fan records, indicates the compromise likely involved customer databases or ticketing systems where supporter information is stored.
The incident highlights ongoing cybersecurity risks facing sports organizations, which maintain large databases of customer information including names, contact details, and payment data. Football clubs have become increasingly attractive targets for cybercriminals due to the valuable personal and financial information they collect from fans through ticket sales, merchandise purchases, and membership programs.
Organizations in similar sectors should conduct thorough reviews of their access logs to identify any suspicious activity. Security teams should verify that multi-factor authentication is enabled for all administrative accounts and that monitoring systems are configured to alert on unusual access patterns. Regular security assessments and updated incident response procedures remain essential for detecting and responding to unauthorized system access.
Source: https://www.politie.nl/nieuws/2026/mei/26/05-verdachte-35-aangehouden-voor-computervredebreuk-bij-ajax.html