England Hockey Investigates Alleged Ransomware Attack by AiLock Group England Hockey, the governing body for field hockey in England, is probing claims of a cybersecurity breach after the AiLock ransomware group listed the organization as a victim on its data leak site. The group’s posting has raised concerns over the potential exposure of sensitive data belonging to players, staff, and other stakeholders. The organization confirmed awareness of the listing and is working to determine whether unauthorized access or data exfiltration occurred. While the full scope of the incident remains unclear, the case highlights the escalating threat ransomware poses to sports governing bodies and nonprofits, which often lack the cybersecurity resources of commercial enterprises. AiLock’s Tactics and the Growing Threat to Sports Organizations AiLock is known for targeting multiple sectors, employing tactics such as: - Phishing campaigns and exploitation of unpatched software vulnerabilities to gain network access. - Data encryption to disrupt operations and lock out legitimate users. - Extortion via leak sites, threatening to publish stolen data if ransom demands are not met. The attack on England Hockey aligns with a broader trend of ransomware groups increasingly targeting sports organizations, which hold valuable personal and operational data, including financial records, medical information, and contact details. England Hockey’s Response and Next Steps In response to the alleged breach, England Hockey has taken the following actions: - Launched an internal investigation to verify AiLock’s claims and assess the extent of any unauthorized access. - Engaged external cybersecurity experts to audit defenses and identify exploited vulnerabilities. - Committed to transparency, keeping stakeholders informed as the investigation progresses. The incident underscores the need for sports organizations to prioritize cybersecurity, though no further details on the breach’s impact have been disclosed at this time.

England Hockey Investigates Potential Data Breach After AiLock Ransomware Claim England Hockey, the national governing body for field hockey, is probing a potential data breach after the AiLock ransomware gang listed the organization as a victim on its leak site. The threat actor claims to have stolen 129GB of data and threatens to publish the files unless a ransom is paid. The organization confirmed awareness of the incident in a statement to BleepingComputer, stating it is conducting a priority investigation with internal teams and external cybersecurity experts. England Hockey is also collaborating with law enforcement and relevant authorities but has not disclosed specific details due to the ongoing probe. As the body overseeing 800+ clubs, 150,000 registered players, and 15,000 coaches, umpires, and officials, England Hockey emphasized its commitment to data security, calling the incident a top priority. AiLock, a ransomware group first documented in April 2025, employs double-extortion tactics, encrypting files with ChaCha20 and NTRUEncrypt (appending the .AILock extension) while threatening to leak stolen data. The group pressures victims with a 72-hour response window and a five-day payment deadline, often citing privacy law violations as leverage. While England Hockey has not confirmed the breach, the incident underscores the growing threat of ransomware attacks targeting sports organizations and their extensive membership networks.