Cyber crime is becoming a growing concern for pretty much every industry in Australia, and sport is no exception. In fact, with so much money, data, and people involved, Australia’s sports and leisure sector has quickly become a major target for cyber criminals, and experts are now warning that all businesses need to be on high alert from grassroots to elite levels.
In 2023–24, cyber crime in Australia surged dramatically, with the Australian Cyber Security Centre (ACSC) receiving over 87,400 reports. That’s roughly one cyber crime report every six minutes.
The financial toll is equally staggering, with cyber-crime costing the Australian economy more than $30 billion annually. Even small leisure businesses and sports clubs, often seen as less likely targets are feeling the pressure, losing an average of $49,600 per incident as cyber attacks grow increasingly sophisticated.
These stats send a pretty clear message… cyber crime is real, it’s growing, and it doesn’t care how big or small your organisation is.
Why Sports Are in the Firing Line
So, what makes sports and leisure organisations such attractive targets?
Recent reports by leading cyber security experts have rated the threat level to the sports and leisure industry as “high” … and for good reason. According to the report, sports organisations are prime targets because they handle large sums of money, rely heavily on digital infrastructure for day-to-day operations, and collect vast amounts of sensitive personal data from players and staff, to fans and volunteers. Things like medical records, passport details, player contracts, bank information… it’s all a goldmine for cyber criminals.
Technology in sport has also grown rapidly in recent years with advances like online ticketing and GPS performance tracking. However, many grassroots and semi-professional clubs still lack the resources to manage the cyber security risks that come with this digital shift.
While tech is clearly helping sports evolve, it’s also exposing clubs to new threats they may not be equipped to handle. Without dedicated IT teams or sufficient funding for proper cyber security measures, smaller clubs are left particularly vulnerable.
And cyber criminals are taking advantage.
Real World Examples That Hit Home
One of the more heartbreaking cases came out of Victoria in 2023, when the Upwey-Tecoma Bowls Club fell victim to a highly sophisticated email scam. The hackers intercepted a routine invoice email and replaced it with a fake version. It looked almost identical, same logo, same invoice layout. The only difference was the bank account details.
Without realising, the club transferred $119,000 to the wrong account thinking they were paying for their new synthetic bowling green. By the time anyone caught on, it was too late. Making things worse, the club’s bank refused to reimburse the funds, leaving the tight knit community club scrambling to recover financially. They ended up launching a GoFundMe campaign just to recoup as much of the lost funds as they could.
It’s a devastating reminder that even small, local clubs are not immune to cyber attacks, and that the consequences can be huge.
Sadly, it doesn’t stop there. In November 2023, AFL team Port Adelaide was listed on a dark web site run by a cyber extortion group. Fortunately, it was later revealed that membership data was not hosted on its internal IT network, and no sensitive information was exposed.
Around the same time, Optus Stadium’s website was taken offline by a Pakistani hacktivist group, reportedly “just for fun.”
This casual attitude towards criminal activity online is part of what makes the threat so dangerous. These attacks aren’t always about stealing money. Sometimes they’re about sending a political message, causing disruption, or just showing off.
In addition, the connection between geopolitics and sport is also becoming increasingly common, with state linked groups using cyber tools to disrupt major international events. Authoritarian regimes are recognising the influence of sport, and are willing to exploit it to advance their own agendas.
What Can Be Done to Tackle Cyber Crime Head On?
Sport contributes approximately $50 billion annually to the Australian economy, supports over 200,000 jobs, and depends on the dedication of 1.8 million volunteers. It’s a cornerstone of our national identity. Protecting it from preventable cyber threats is essential to ensuring its continued success and integrity.
As cyber crime grows more sophisticated, experts say it’s time to treat cyber security in sport as a critical issue, not an afterthought. There’s a strong call for a national conversation around strengthening digital defences across every level of Australian sport, from national bodies right down to the local weekend leagues.
The truth is, clubs can’t just rely on luck and good intentions anymore. They need real strategies, both to prevent attacks and to respond effectively if something does go wrong. That means routinely running security updates, backing up data, training staff and volunteers to spot phishing scams, implementing multi-factor authentication, and having a solid incident response plan in place.
And increasingly, it also means having cyber insurance.
Cyber Insurance: A New Frontier for Sports Protection
To help fill the gap, leading sports and leisure underwriter, Sportscover, has teamed up with global specialist insurer Beazley to offer Cyber Breach Response (CBR) insurance. CBR is a purpose built policy aimed at helping sporting clubs and businesses deal with the risks that come with operating in a digital world.
Chris Nash, Managing Director of Sportscover Australia, said offering cyber protection was a natural next step for the company.
“We live in a digital world and there’s no getting around it,” Nash said. “The reality is, Australia’s sporting and leisure sector is just as exposed to cyber crime as any other industry. It’s now part of the everyday risk landscape. That’s why we introduced CBR, to help clubs manage those risks head on.”
According to Nash, the new insurance policy is more than just financial protection. It’s about managing the full impactof a cyber attack, which can include legal and reputational damage, on clubs and their members.
“We want to be at the forefront of protecting Australia’s sports and leisure communities,” Nash said. “A data breach isn’t just about lost money, it’s about trust, identity, and the future of the organisation. Cyber Breach Insurance gives clubs and businesses the support they need to bounce back.”
Time to Take It Seriously
No sporting organisation is too small or too big to be targeted. If you’re collecting data, handling finances, or running any part of your club online, you’re already at risk.
The takeaway? Don’t wait for something to go wrong before you act.
Start by having open conversations about cyber security in your club or business now. Review your current systems. Ask questions like… Who has access to sensitive data? Are we backing up information regularly? Do we have a plan in place if an attack happens?
And most importantly, don’t be afraid to ask for help. Whether it’s from a cyber security expert, your insurance provider, or a national sporting body, the support is out there.
Because in today’s world, protecting your club online is just as important as protecting it on the field.
Disclaimer: General advice and information only
Any advice and information on this website is general only, and has been prepared without taking into account your particular circumstances and needs. Before acting on any information on this website you should assess or seek appropriate financial advice on whether it is appropriate for your needs, financial situation and insurance objectives.