Leading sports technology company has leaked data – and even professional athletes could be affected

Researchers have warned that sports analytics technology company TrackMan unknowingly exposed sensitive customer data.

Jeremiah Fowler, a security analyst known for tracking down unprotected databases, revealed new findings that he believed belonged to TrackMan.

The database had no password and contained 31,602,260 records – a total of 110TB, including sensitive customer data such as names, email addresses, IP addresses and security tokens – plenty of information to carry out identity theft, phishing and other malicious activities.

Impact of unsecured databases

After discovering the database, Fowler contacted TrackMan, who restricted public access that same day. However, we don’t know how long it was left outside and whether anyone accessed it beforehand. We also don’t know if it is TrackMan that manages this database or if it is a third party.

TrackMan is a technology company specializing in sports analytics, particularly golf and baseball, whose solutions are used by Golf Channel, BBC and CNN World. It uses radar and imaging technology to track the trajectory and performance of balls and players with high precision. Athletes, coaches and teams use TrackMan’s detailed insights to improve their performance on things like ball speed, launch angle or spin rate. Its products are widely used in professional leagues, training facilities and by broadcasters to enhance sports analytics and fan experiences.

Unsecured databases remain a leading cause of data breaches and leaks. They are often accidentally exposed to the Internet, either due to misconfigurations or oversights during deployment. Without basic security measures such as password protection or encryption, they become easy targets for hackers, who can locate them using automated tools and web scanners. The ease of access to these databases, often without the need to bypass security layers, makes them extremely vulnerable to unauthorized access.

The consequences if hackers find such databases are serious. Companies can suffer financial losses, fines, reputational damage and a loss of customer trust. They can also face lawsuits, compliance violations and long-term business interruptions.

Recent Posts