Massive Cyber Attack Compromises 1.5 Million Files from Saudi World Cup Construction Firm

A cybersecurity group has reported that hackers have stolen more than 1.5 million files from a construction company in Saudi Arabia that was commissioned to build facilities for the 2034 Fifa World Cup.

Approximately 17 terabytes of documents, including contracts, payment information, stadium designs, and the personal data of 150,000 employees at the China Railway Railway Construction Corporation /Sama Construction consortium, were reportedly compromised on October 3. Hackmanac, a UAE-based cybersecurity analysis firm, attributed the attack to a group known as WallStreet. The firm identified the consortium as the main contractor for Jeddah Central Stadium, a planned venue for the 2034 Fifa World Cup, and classified the CRCC hack as one of the most severe incidents it has ever observed. Neither CRCC nor the Saudi Arabia National Cybersecurity Council responded to requests for comment from The National.

According to another cybersecurity analysis firm, SOCRadar, the WallStreet group first gained prominence this year. The firm's ransomware profile states that the group utilizes double-extortion tactics, targeting various sectors with sensitive data breaches to pressure victims into compliance. SOCRadar noted that the group operates internationally, with notable activity in the United States and Ecuador, and has claimed responsibility for at least 32 attacks worldwide.

Saudi Arabia was chosen as the sole host nation of the 2034 World Cup two years ago. The country has tentative plans to host the tournament across 15 stadiums in five cities, which includes eight venues in the capital, Riyadh. Eleven of these stadiums are scheduled to be built specifically for the tournament, featuring the proposed 92,000-seat King Salman Stadium. Yasser Al Misehal, president of the Saudi Arabian Football Federation, has previously stated that host cities will be connected by state-of-the-art facilities to guarantee an amazing fan experience.