Hacker attack on Dinamo: member data partially exposed, passwords and cards uncompromised
GNK Dinamo has confirmed that a limited-scope security incident has affected personal data of some members, whilst payment card and password data has not been compromised.
Dinamo releases details on security incident: attack did not target club's official websites
GNK Dinamo has released an updated statement regarding a security incident that attracted public attention after hacker group INF GRUPA claimed on the dark web to have breached systems at the Croatian champions and freely shared data of club members, according to Večernji list.
According to the club's statement, the incident did not occur directly on GNK Dinamo's websites. "After receiving notification of a possible security incident, GNK Dinamo initiated an internal investigation and engaged external, independent security and other specialists to determine the circumstances of the incident", the statement on social media reads.
The club emphasises that the incident was limited in scope and that, based on information received from data processors, there is no risk of similar incidents occurring in future. All necessary measures are being taken to further strengthen data security.
Which categories of data were affected
According to information available to date, the incident involved limited categories of personal data, the exact categories affected depending on individual members. These include name, surname, national identification number, contact details and other data provided by the individual in the system. Dinamo stresses that these categories were not affected for all members, which is why those whose data has been exposed will be notified via email as well.
Data concerning payment cards and passwords has not been compromised, the club confirmed.
Advice for members and contact for queries
The Blues used the statement to also provide reminders about digital security — calling on everyone to be wary of suspicious and fake messages and emails, to change passwords regularly and to ensure they are complex.
Members who have questions or concerns about their own data can contact the club's Data Protection Officer at [email protected].
"The priority of GNK Dinamo has always been and remains the protection of data for all our members, transparent communication with the public and the implementation of all necessary measures in accordance with personal data protection regulations", the statement concludes.
News of the alleged hacker attack emerged a day earlier, and Dinamo responded after several hours, announcing an internal investigation and the engagement of technology specialists. The updated statement represents the result of that investigation.
Source: Večernji list