Court of Arbitration for Sport

The Court of Arbitration for Sport (CAS), headquartered in Switzerland, serves as an independent institution providing dispute resolution services specifically for the sports sector. Its primary function involves adjudicating legal conflicts arising within the world of sport through arbitration and mediation procedures. CAS offers a specialized forum for resolving disputes between athletes, sports federations, sponsors, and other entities involved in sporting activities, covering a wide range of issues from disciplinary actions to contractual disagreements. This institution operates internationally, handling cases submitted by parties globally who agree to its jurisdiction, thereby establishing itself as a central pillar in the governance structure of international sport.

A significant cybersecurity incident impacting CAS occurred on August 12, 2016. Attackers successfully breached CAS servers alongside those of an affiliated anti-doping organization. A group associating itself with Anonymous Poland claimed responsibility for the attack and subsequently leaked stolen data. The compromised information included access details for over 3,000 email accounts protected by weak encryption that was vulnerable to rapid decryption techniques. Furthermore, personal details belonging to contributors associated with the targeted sites were exposed during this breach. Forensic analysis determined that the perpetrators gained unauthorized access by exploiting an SQL injection vulnerability, utilizing automated tools to extract the sensitive data efficiently. While the attackers publicly released the stolen information, they did not disclose a specific motive for targeting CAS and its partner organization.