Millions of Sports Fans at Risk Due to Weak Team-Related Passwords A recent study by Duelbits has exposed a widespread cybersecurity vulnerability among U.S. sports fans, revealing that 42.3 million passwords tied to professional sports teams have been compromised in data breaches. The research analyzed password exposure across 124 teams in the MLB, NBA, NHL, and NFL, uncovering alarming trends in password predictability. New York fans are among the most affected, with six of the state’s teams ranking in the top 20 for breached passwords. The New York Yankees were the second most compromised, with 1.23 million passwords linked to the team found in breaches. The New York Rangers followed closely in third place, with 1.1 million breached passwords, while the New York Islanders (24th) and Buffalo Sabres (58th) also ranked high. NFL teams like the Giants (11th, 837K breaches) and Jets (19th, 652K breaches) were similarly exposed, along with the Knicks (16th, 710K breaches) and Mets (20th, 651K breaches). Nationally, NFL fans face the highest risk, with an average of 379,447 breached passwords per team, followed by the NBA (343,985) and MLB (335,251). The Carolina Panthers topped the list with 1.31 million compromised passwords, while the Indianapolis Colts had the fewest (31,444). The study highlighted that simple variations such as team names with numbers or capital letters (e.g., yankees1, NewYorkYankees) were frequently exploited. Cybersecurity expert James Bore warned that using popular team names as passwords increases vulnerability due to their predictability, making them prime targets for attackers. The findings underscore the risks of non-random, easily guessable passwords, particularly among sports enthusiasts.