CSIDB logo
Incident

Football Leaks

Incident posture

Attack window
Dec 2016
Location
Germany
Status
Historical
CIA posture
Available to members
Updated
2025-12-08 00:00

Linked entities

Victim
Football Leaks
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
Dec 2016
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A significant data breach exposed extensive confidential documents from professional football, revealing alleged financial misconduct and corruption within European clubs and among high-profile players. The leak, comprising 1.9 terabytes of data including secret agreements and tax-related records, was disseminated to a German publication by a group identifying as "Football Leaks." Initial reports highlighted potential tax avoidance schemes involving prominent athletes, with broader implications for the sport's governance. The incident underscored vulnerabilities in safeguarding sensitive information and reflected wider trends of large-scale data exposures facilitated by digital anonymity. Further revelations were anticipated from the trove of documents, which threatened to uncover additional irregularities across the industry.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

3 techniques

Description

On December 2, 2016, German publication Der Spiegel revealed a massive data breach involving professional football (soccer), dubbed "Football Leaks," after receiving 1.9 terabytes of confidential documents totaling 18.6 million files. The leak exposed secret financial agreements between European football clubs and players, with initial reports focusing on tax-related practices of high-profile athletes Cristiano Ronaldo and Mesut Özil. The data indicated potential exploitation of tax laws to maximize earnings, following a pattern seen in Lionel Messi's 2016 tax fraud conviction. The anonymous "Football Leaks" group facilitated the disclosure, which Der Spiegel described as football's equivalent of the Edward Snowden revelations due to its unprecedented scale. The publication planned a series of investigative reports based on the documents, suggesting broader systemic issues beyond individual cases.

The breach highlighted widespread financial irregularities in European football governance and player contracts, with implications for legal compliance and public trust. While Der Spiegel's initial coverage centered on tax avoidance strategies, the vast document trove suggested forthcoming revelations about club-level corruption and additional controversial practices. The incident underscored growing vulnerabilities in maintaining confidentiality for sensitive financial dealings in sports, attributed to technological advances enabling large-scale anonymous data transfers. No immediate containment measures or institutional responses were detailed in the initial disclosure, though the leak's existence signaled increased scrutiny of football's financial ecosystems. The event reinforced broader societal trends toward reduced secrecy for illicit activities through digital whistleblowing platforms.

Sources

Sources available to members: 1 source.

CSIDB