Cyber Hack Update: Data leak concerning 20 athletes from 14 countries and 13 sports

The World Anti-Doping Agency (WADA) confirms that, again today, the cyber hacker Group “Fancy Bear” released a batch of confidential athlete data on their website, which they illegally obtained from a Rio 2016 Olympic Games account of WADA’s Anti-Doping Administration and Management System (ADAMS). 

This time, the group released Therapeutic-Use Exemption (TUE) data concerning 20 athletes from 14 countries, including: one from Argentina; one from Australia, one from Brazil, one from Canada, one from Colombia, one from Germany, one from France, one from Great Britain, three from Japan, two from New Zealand, two from Sweden, one from Venezuela, one from South Africa and three from the United States.

The athletes are from the sports of Aquatics, Canoe, Cycling, Equestrian, Field Hockey, Gymnastics, Judo, Rowing, Sailing, Table Tennis, Tennis, Triathlon and Weightlifting.

WADA is taking this situation concerning athlete privacy very seriously. The incident response team that we have assembled is actively working with law enforcement agencies in Canada and elsewhere, and acting on the intelligence obtained through our investigations to prevent any further intrusions. We are also consulting with leading cyber security experts to ensure that no further information is accessed from the broader ADAMS.

Fancy Bear obtained access to the Rio 2016 Olympic Games account through spear phishing of ADAMS users’ email accounts through which hackers obtained ADAMS passwords. We still have no reason to believe that they have accessed the broader ADAMS system.

The Agency is in contact with the relevant National Anti-Doping Organizations (NADOs) and International Federations (IFs) whose athletes are impacted by this latest data release so that they can provide them with the necessary support.  

Should athletes, or other ADAMS users, have any questions or concerns; or, have encountered suspicious activity in relation to ADAMS such as phishing emails, they are encouraged to contact the helpdesk at adams@wada-ama.org or on +1 514 904 8800.

WADA wishes to emphasize that TUEs are only granted by IFs, NADOs and Major Event Organizers (MEOs) following a robust review process that is defined in the International Standard for Therapeutic Use Exemptions (ISTUE); and, evaluation by three physicians specialized in sports medicine and/or other relevant specialties. Granted TUEs are subject to further evaluation by the relevant ADOs and WADA. WADA has confidence in the TUE system.

The Agency is committed to providing updates as circumstances evolve.