- A hacker named Lenken claims to have leaked 130 million records linked to the UAE Football Association.
- The claimed files hold over 70,000 documents and about 122 GB of data on players and officials.
- Nobody has confirmed the breach yet, and the football body has not released any statement about it.
A hacker using the name Lenken says he leaked databases and documents tied to the United Arab Emirates Football Association (UAE FA). The cybersecurity account CyberPulse shared the claim on X.
The post describes a huge pile of databases and documents. Those files allegedly hold personal details of professional football players and other staff. The available information does not show where the data came from. It also does not show whether anyone broke into the association’s systems. The posted numbers may not match the real files either.
The claim raises worry about how sports groups guard personal data. Their records often include identity papers, contact details, and office files. Players and officials depend on these groups to keep such details safe.
Hacker Lenken Lists Huge Numbers for the Alleged Leak
According to the CyberPulse post, Lenken says the data holds about 130 million records. He also claims more than 70,000 documents and around 122 GB of data. The post adds more than 500 database tables and 55 Excel sheets. It also mentions organized files linked to over 4,000 professional players. The hacker presents all of this as one large archive.
All of these numbers come from the hacker. The post is the only source for them so far. No one has shown that researchers opened the files. No one has checked where the files came from. No one has confirmed that the records hold real personal data.
The record count also needs careful reading. It does not equal the number of victims. A database can hold repeated entries and old records. One person can also appear many times. Without a proper check, nobody can say how many individuals are affected. The real number of people could be much smaller than the claimed figure.
Claimed Files Name Players, Referees, and Managers
The post says the data includes names and contact details of players, referees, and managers. It presents these as groups of people inside the archive. Other listed items include phone numbers, email addresses, and home addresses. The files also allegedly hold identity cards, passport documents, and player-related office records.
If the files are real, football staff could face serious risks. Criminals could use correct contact details to send targeted phishing messages. These messages could look like they come from clubs, agents, football officials, or competition organizers. Mentions of a player’s registration, contract, or travel plans would make a fake message more believable.
The risks of exposed personal information extend beyond sports organizations; another reported incident involving a database containing 24 billion login records raised global cybersecurity alarms about credential theft and account security.
Identity papers and home addresses could also help criminals pretend to be someone else. They could support identity fraud and other privacy abuse. The real danger depends on which records leaked. It also depends on whether the details are still current. Another factor is whether the identity papers are readable. The post does not answer any of these questions.
Sports bodies often work with players, clubs, agents, referees, and governing groups. A real leak could therefore help attackers reach several groups through related messages. These risks are only possible outcomes. Nothing shows that criminals have used the data. Nothing shows that any person has suffered harm.
Football Body Stays Silent as Outside Proof Stays Missing
A search of public sources found no independent report that confirms Lenken’s claim. It also found no official breach notice from the UAE FA. The association’s official website lists its competitions and activities. A report from May 2024 says the association signed an agreement with the UAE government’s Cybersecurity Council.
The deal aims to strengthen cybersecurity teamwork, including preventing cyberattacks. Neither source confirms the alleged breach. The search covered only sources that anyone can find online. Those sources describe the association’s normal work and say nothing about Lenken or the claimed files.
A lack of public confirmation does not prove that nothing happened. It only means people should not report the claim as a proven breach. Confirmation would need solid evidence that links the files to the association. Experts would also need to check the records themselves. Ideally, the UAE FA or a government body would issue a statement.
Until then, the 130 million records, 70,000 documents, and 122 GB archive remain claims from the hacker. The true source, size, and list of victims stay unknown.
For now, the story rests on one social media post. The post names the hacker, lists the numbers, and describes the files. It offers no outside proof for any of those points. Readers should treat every detail as a claim until stronger evidence appears.
People named in such files should still stay careful. They should doubt unexpected requests for passport copies, identity numbers, passwords, or verification codes. They should check strange requests through trusted channels. They should also report suspicious messages to their clubs or the proper authorities. Staying alert is the safest step while the claim remains unproven.
