Hackers Leak Personal Data of Saudi Games Athletes in Major Cyberattack

Thousands of athletes and visitors linked to the Saudi Games have had their personal information leaked online following a cyberattack by a pro-Iranian hacker group known as Cyber Fattah.

The group published stolen files online on June 22, claiming they accessed the data by hacking into a system called phpMyAdmin. The files included sensitive information such as passport and ID card scans, medical records, bank details, and login credentials of IT staff and government officials.

Cybersecurity firm Resecurity believes this attack is part of a larger campaign backed by Iran and its allies, aimed at spreading anti-US, anti-Israel, and anti-Saudi messages online. Experts say the timing of the leak is not a coincidence—it came soon after cyberattacks on Truth Social and US airstrikes on Iranian nuclear sites, suggesting a coordinated political motive.

The stolen data appears to come from the Saudi Games 2024 registration platform, which had details of over 6,000 athletes from 53 sports. Cyber Fattah claimed responsibility and spread the news through pro-Iranian and Hezbollah-linked online channels.

The hacker behind the leak, using the alias “ZeroDayX,” posted the data on the dark web using a temporary account—an approach often used by state-sponsored hackers trying to hide their identity.

Big sporting events are increasingly becoming targets for cyberattacks because they store large amounts of personal and financial data, attract global attention, and often have weak points in their digital systems. These attacks can be used to spread political messages, install ransomware, or go after high-profile individuals.

This breach is similar to past cyberattacks on events like the 2018 Winter Olympics and highlights the urgent need for stronger cybersecurity in the sports world.

Saudi Arabia is preparing to host several major events, including the Esports World Cup in 2025, the Gulf Cup in 2026, and possibly the 2036 Olympics—making it a high-profile target for future cyber threats.

Experts are now urging sports organizers and governments to use digital identity protection tools and threat-monitoring systems. These technologies can help detect leaks early, reduce risks from third parties, and strengthen defenses against future cyberattacks.