API security

March 26, 2026

Ajax Football Club Hack Exposed Fan Data and Enabled Ticket Hijack

A hacker breached AFC Ajax systems, exposing 300,000 fan accounts and enabling ticket reassignment via vulnerable APIs and shared keys.