{"id":219839,"date":"2025-10-23T08:17:08","date_gmt":"2025-10-23T08:17:08","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/219839\/"},"modified":"2025-10-23T08:17:08","modified_gmt":"2025-10-23T08:17:08","slug":"fia-responds-to-hack-of-website-containing-verstappens-passport-and-other-drivers-data-%c2%b7-racefans","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/219839\/","title":{"rendered":"FIA responds to hack of website containing Verstappen’s passport and other drivers’ data \u00b7 RaceFans"},"content":{"rendered":"

Hackers compromised an FIA website which contained sensitive personal information and documents relating to drivers including world champion Max Verstappen<\/a>.<\/p>\n

Security researcher Ian Carroll revealed the breach in a blog post on Wednesday<\/a>. He said the FIA addressed the vulnerabilities in its systems immediately after he and two other researchers contacted them in June.<\/p>\n

The FIA confirmed the breach occured and said it had taken steps to secure drivers\u2019 data. It has contacted the drivers involved as well as the relevant data protection authorities.<\/p>\n

The hackers compromised the FIA\u2019s Driver Categorisation website by registering an ordinary user account, then taking advantage of vulnerabilities in the system to gain administrator privileges. This gave them the ability to access sensitive personal information of any driver they chose. \u201cWe seemed to have full admin access to the FIA driver categorisation website,\u201d they noted.<\/p>\n

The hackers stated they neither accessed nor retained sensitive information relating to anyone found through the hack and reported its findings to the FIA immediately.<\/p>\n

\u201cWe stopped testing after seeing that it was possible to access Max Verstappen\u2019s passport, r\u00e9sum\u00e9, license, password hash, and PII [personally identifiable information,\u201d Carroll wrote. \u201cThis data could be accessed for all F1 drivers with a categorisation, alongside sensitive information of internal FIA operations. We did not access any passports [or] sensitive information and all data has been deleted.\u201d<\/p>\n

The FIA\u2019s Driver Categorisation website contains the details of almost 7,000 drivers. The governing body responded to the breach in a statement supplied to RaceFans.<\/p>\n

Advert | Become a RaceFans supporter and go ad-free<\/a><\/p>\n

\u201cThe FIA became aware of a cyber incident involving the FIA Driver Categorisation website over the summer,\u201d it said. \u201cImmediate steps were taken to secure drivers\u2019 data, and the FIA reported this issue to the applicable data protection authorities in accordance with the FIA\u2019s obligations.<\/p>\n

\u201cIt has also notified the small number of drivers impacted by this issue. No other FIA digital platforms were impacted in this incident.\u201d<\/p>\n

According to the researchers the FIA took the website offline on June 3rd, the same day they were notified of the breach. They supplied details of a \u201ccomprehensive fix\u201d one week later.<\/p>\n

The FIA says it has \u201cinvested extensively in cyber security and resilience measures across its digital estate\u201d and \u201chas put world-class data security measures in place to protect all its stakeholders and implements a policy of security-by-design in all new digital initiatives.\u201d<\/p>\n

Miss nothing from RaceFans<\/p>\n

Get a daily email with all our latest stories – and nothing else. No marketing, no ads. Sign up here:<\/p>\n

Formula 1
\nBrowse all Formula 1 articles<\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"Hackers compromised an FIA website which contained sensitive personal information and documents relating to drivers including world champion…\n","protected":false},"author":2,"featured_media":219840,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36],"tags":[1687,8097,372,6537,3006,101,56,54,55],"class_list":["post-219839","post","type-post","status-publish","format-standard","has-post-thumbnail","category-f1","tag-f1","tag-fia","tag-formula-1","tag-formula1","tag-max-verstappen","tag-sports","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/219839","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=219839"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/219839\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/219840"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=219839"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=219839"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=219839"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}