Official email account for the Belgian Grand Prix compromised by hackers, used for phishing
Learn More
The official email account for the Belgian Grand Prix was compromised by hackers, leading to a phishing scam that targeted fans with the promise of a €50 gift voucher.
The scam was part of an attack on the Spa Grand Prix, a Formula 1 World Championship race hosted at the Circuit de Spa-Francorchamps in Stavelot, Belgium, scheduled from July 26 to 28.
The email hijack occurred on March 17, 2024. Following the hijack, the attackers sent fraudulent emails to an undisclosed number of recipients, falsely offering a €50 voucher for Grand Prix tickets accessible via an embedded link. This link led to a counterfeit website mimicking the official Spa Grand Prix site, where victims were prompted to enter personal and banking information.
SPA GP informed its customers within hours of the phishing attack, advising them against clicking on any links from the compromised email.
As of now, the full extent of the breach, including the number of affected individuals and the exact nature of the email compromise are not disclosed.
SPA GP reassures that this security breach did not affect its official website or the integrity of its ticketing system. They encourage ticket purchasers concerned about potential data exposure to reach out to the SPA GP's secretariat for assistance.
