Sports Events: Hackers are now targeting high-profile sports events, venues: Microsoft report – Times of India

High-profile or large sporting and entertainment events, especially those in increasingly connected venue environments, are now being targeted by hackers at increasing rates, a report by Microsoft has said.

Microsoft released its fifth instalment of Cyber Signals – a cyber threat intelligence brief – which states that such large events can introduce cyber risk for organisers, regional host facilities and attendees.

What information is at risk
The report highlighted that sports teams, major league and global sporting associations, and entertainment venues house a trove of valuable information desirable to cybercriminals. The information on players’ and teams’ athletic performance, competitive advantage and personal information is a lucrative target.

“Unfortunately, this information can be vulnerable at-scale, due to the number of connected devices and interconnected networks in these environments,” the report noted.

“Often this vulnerability spans multiple owners, including teams, corporate sponsors, municipal authorities, and third-party contractors. Teams, coaches, athletes, and fans are also vulnerable to data loss and extortion,” it said.
Key findings from the report
The Microsoft report said that cyberattacks against sports organisations are increasing. As the pressure to deliver a smooth, safe experience on the world stage introduces new stakes for local hosts and facilities, a single misconfigured device, exposed password, or overlooked third party connection can lead to a data breach or successful intrusion.
Microsoft says that it delivered cybersecurity support to critical infrastructure facilities during the FIFA World Cup Qatar 2022.

“It performed over 634.6 million authentications while providing cybersecurity defences for Qatari facilities and organisations between November 10 and December 20, 2022,” the company said.
According to the report, there are threats from nation-states and cybercriminal groups. As large global events continue to be desirable targets for threat actors, there are a variety of motivations from nation-states for broader geopolitical interests.
“Furthermore, cybercriminal groups looking to leverage the vast financial opportunities that exist in sporting and venue-related IT environments will continue to see these as desirable targets,” the report noted.

How to safeguard
Microsoft recommends having an additional set of eyes monitoring the event around the clock to proactively detect threats and send notifications.
“Cybersecurity threats to sporting events and venues are diverse and complex. They require constant vigilance and collaboration among stakeholders to prevent and mitigate escalation, and with the global sports market valued at more than $600 billion, the target is rich,” the report said.
Identifying potential threats specific to the event, venue, or nation where the event occurs is also an important step to keep cyberattacks at bay.