Cyber criminals target customer payment card details after hacking Leeds United

Leeds United Football Club has said the card details of “a small number” of its customers were compromised, after its retail website was hacked by cyber attackers.

The Championship club said the breach occurred between 19 and 24 February 2025.

In a statement, Leeds United added: “The club has communicated with all of those directly impacted and is continuing to work with the Information Commissioner’s Office.

“A forensic investigation was undertaken by a specialist third-party as soon the club discovered the breach, and measures were implemented to stop and recover from the attack.

“The club is disappointed that the attack was successful despite layers of cyber security, and offer our sincere apologies to anyone who has been adversely affected.”