AllUnited data breach
AllUnited announced a data breach on Nov 10, 2026, exposing names, addresses, email addresses and phone numbers. The number of people affected has not been disclosed. It was caused by a cyberattack. No settlement or compensation has been announced.
Was I affected?
You may be affected if you, or your child, are a current or former member of a Dutch sports club, sports association (such as the cricket association KNCB) or community group that keeps its member records in AllUnited or uses the ClubApp. Clubs are emailing affected members.
| Announced | Nov 10, 2026 |
|---|---|
| When it happened | Evening of November 9, 2026; discovered and patched November 10, 2026 |
| Country | Netherlands |
| Data exposed | Names, Addresses, Email addresses, Phone numbers, Dates of birth, Bank or financial details, Passwords and Other details |
| Status | Confirmed by the company or a regulator filing |
What happened
AllUnited, a Dutch membership administration system used by sports clubs, national sports associations and other community groups, said an unknown attacker exploited a flaw in its software on the evening of November 9, 2026 and copied data from its database, covering all organizations that use AllUnited. It found the leak on November 10 and fixed it the same day. Member records exposed include name, address and place of residence, email, phone, date and place of birth, bank account number (IBAN) where entered, login details for people with an AllUnited account, and other fields such as membership number, team and comments; youth members' data is included. AllUnited is resetting all passwords and, after consulting the Dutch Data Protection Authority (AP), offered to file the breach report with the AP on clubs' behalf on November 13. Dutch outlet NU.nl reported that more than 350 sports clubs had reported the breach.
What should I do?
- Be very careful with payment requests for membership fees, fines or other amounts that arrive by email, text or WhatsApp; check with your club through a channel you already know before paying.
- Your AllUnited password is being reset; if you used the same password anywhere else, change it there too.
- Watch your bank account for direct debits you didn't agree to, since IBANs were in the data.
- Be alert to people impersonating you or your club using your name, address and date of birth, and tell parents of youth members to do the same.
Check the other services you use →
Sources
- Beveiligingsincident bij AllUnited (Security incident at AllUnited) · AllUnited (in Dutch) · official
- IMPORTANT: Your data stored at AllUnited via the KNCB may end up in the wrong hands due to a data breach · KNCB (Royal Dutch Cricket Association) · official
- Meer dan 350 sportclubs melden datalek na cyberaanval op AllUnited (More than 350 sports clubs report data breach after cyberattack on AllUnited) · NU.nl (in Dutch) · news