On June 22, 2025, the hack was revealed on Telegram in the form of SQL database dumps, according to cybersecurity firm Resecurity, which described it as an information operation “carried out by Iran and its proxies.”
According to Resecurity, the actors obtained unauthorized access to the backend phpMyAdmin and exfiltrated stored documents. This is an illustration of how Iran uses data breaches to target important social and sporting events as part of a broader online propaganda campaign against the United States, Israel, and Saudi Arabia.
The information is thought to have been taken from the official Saudi Games 2024 website and posted on DarkForums, a cybercrime forum that has garnered notoriety following BreachForums’ many takedowns. ZeroDayX, a forum user with a burner identity that was probably made to advertise this breach, revealed the information.
Credentials of IT personnel, email addresses of government officials, information about athletes and tourists, passports and ID cards, bank records, medical forms, and scanned images of private documents are among the exposed material read more about Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.