World Rugby was "forced to suspend one of its websites" after the governing body was the "target of a cyber attack" through which hackers obtained personal data from thousands of subscribers to one of its databases, according to Gavin Mairs of the London TELEGRAPH. It is understood that the hackers were able to access the first name, email address and encrypted passwords of thousands of users, including players, coaches and parents from around the world after the security breach on May 3. It is "not yet clear if it was a random attack to steal data or if World Rugby was deliberately targeted by one of the cyber espionage groups that has previously leaked confidential information from the websites of sporting bodies such as WADA and the IAAF." The hackers targeted World Rugby's training and education website, which is a platform for the grassroots game to "keep up to date with the latest drills to improve technique and offer advice for the prevention of injuries" such as concussions. World Rugby's main website, including Rugby World Cup ticketing and fan data plus sensitive information around players' disciplinary hearings, "was not at risk from the attack" (TELEGRAPH, 5/12).
