Big Doping scandal

Adam Haertle wrote:

All. This one word best describes the scale of what the burglars stole from the computers and servers of the Polish Anti-Doping Agency. Not only did they steal it, but they also published it online. And you can find literally everything in this data - from "corporate" information, such as athletes' personal data, medical data, anti-doping test reports, investigation files or documentation of cooperation with law enforcement agencies, to private data from users' computers - the games they play their children, vacation photos or divorce documents.

On August 6, last Tuesday, around noon on one of the Telegram channels (we deliberately do not provide the name because the data is still there) there was an entry from a generally unknown "hacker group" (actually two of them, because the incident was allegedly the result of their collaboration). ). The entry announced the leak of data from the anti-doping agency of one of the European Union countries.

A few hours later, data stolen from the infrastructure of the Polish Anti-Doping Agency appeared on the same channel. The hackers released RAR files that, after unpacking, occupy over 242 GB. These gigabytes of information contain almost 50,000 files. These are both files from individual users' computers (usually the Desktop and My Documents folders, totaling over 58 GB), as well as the server's virtual disk file with a volume of 184 GB.

On the same day, the burglars modified the POLADA website at antydoping.pl. The website remains unavailable until the article is published. The modification of the website was carried out using the credentials of one of the employees - the password for managing WordPress was stored on this person's computer in plain text in a Word document.

On the same day, one of the injured athletes, Wojtek Pszczolarski, published the content of the message that POLADA sent to the athletes. The "GDPR compliant" message shows that data such as name, surname, residential address, telephone number and e-mail address have been disclosed. The announcement contains nothing about the results of anti-doping tests, the results of medical tests and the health status of players, or the documentation of investigations conducted by the agency, which often delve deep into the lives of suspected players. Why were these elements missing from the message? That's a very good question.

Contrary to POLADA's announcement, the disclosed (and still available on the Internet) data contains a lot of other information apart from the athletes' personal data. We are unable to count how many people have been exposed - but these are probably all people who have been subjected to anti-doping tests in Poland over the last few years, and there are thousands of them. But that's not all, of course. What else can be found in the leak?

Of course, there are many anti-doping control reports and lists of such controls, from which you can find out who among the players from all over Poland prefers cocaine and who prefers THC.

We also have reports of failed doping controls.

Applications for a therapeutic use exemption.

The disclosed data includes, for example, photos from searches of places that looked like illegal chemical laboratories, recorded under the title "Documentation constituting an annex to inspection reports of items secured for investigation."

You can also find interrogation reports of doping suspects.