Big Data Moves The Goalposts: Football's New Cyber Threat

Football is a business driven by data. Data analytics facilitate player and game analysis, social media provides a platform for modern marketing and profile-building, ticket sales are made online, and technology underpins key stadium infrastructure. Football is very much in the digital space: a big data business that faces some big data problems.

At the same time that football has embraced the digital space, the sporting industry has become a target for a range of adverse groups, from nation-states to cybercriminals and hacktivists. Sport-related entities are now operating in an environment where they can be targeted not only for financial gain, but also for more personal attacks, such as attempts to discredit players or national teams.

The risks

Medical and training records are assets commonly recognised as being sensitive, and the extent of their sensitivity became apparent late last year. The 2016 to 2018 cyber attacks by the Russian hacking group commonly referred to as Fancy Bear provided access to athletes' medical records, and the hacking group used these to paint a picture of individuals and teams allegedly stretching the rules for certain drugs. The reality of the drug usage was largely irrelevant; the attackers wanted to raise an air of suspicion, and they succeeded. Clubs need to be aware that when data leaks, context can't be controlled, and the press doesn't always frame information that could be placed in a negative light impartially.

Player analytics and team statistics are another area where data assets have taken on significant importance in football. Virtually all Premiership teams use the detailed analytics provided by sport-focused digital tools to analyse themselves, and their opponents. What happens if a malicious party is able to alter that data, either influencing how a team handles its players, or how the players approach an opponent on the field? Savvy attackers could find benefit in sabotaging a team's plans and then placing a few strategic bets. For examples on this, please see our previous article on dark web match-fixing. When a club is relying on systems to guide strategy, they need to know that they can trust those systems.

Clubs value data pertaining to staff, ticket holders, online customers, and any other individuals with whom it...