The Welsh Rugby Union can confirm an investigation is
underway into a suspected cyber security breach concerning some official
supporters’ club members’ data held by an engaged third party.
The WRU takes the privacy and security of its supporters’
club members’ personal data extremely seriously and is carrying out a robust
and full investigation into these reports, including complying with relevant
reporting requirements to the ICO (Information Commissioner’s Office).
We believe they relate to one of our service provider’s
systems and we are working closely with the provider, which is also
implementing its own in-depth inquiry.
All of this data has since been removed from the online
source and it has already been established that no password or payment
information has been compromised.
No other vulnerabilities or suspicious activities have been
found in WRU systems after a thorough review of all systems and processes.
We can also reassure all supporters club members and other
customers that we remain extra vigilant in this space and continue to engage
with our respected cyber security partners on best practice across the
business.
Further updates will be issued as soon as available.