Confirmed breach

All United data breach

NLNetherlands

NOS, Security.nl and NRC reported a data breach at All United (Netherlands) on 10 November 2026, and it has been confirmed.

People affected: Not reportedno count given yet
Reported: 10 November 2026News report and 3 more

What was exposed 8

Financial account and card details
Passwords and logins
Email addresses
Phone numbers
Dates of birth
Names
Addresses
Cities

How it happened

How: Hacking data from the database were copied source
Our translation from Dutch
gegevens uit de database zijn gekopieerd
Way in: AllUnited an error in a login form gained access to the data source
Our translation from Dutch
een fout in een aanmeldformulier toegang hebben gekregen tot de data

What changed since it was first reported

12 November 2026 Confirmed breach (Security.nl)

Sources 4

News reportSecurity.nlDutch associations and clubs affected by data breach at AllUnited (our translation from Dutch)11 November 2026
Confirmed by AllUnited: the data breach has been reported to the Personal Data Authority
Our translation from Dutch
is het datalek bij de Autoriteit Persoonsgegevens gemeld
News reportNRCMuch personal data stolen in data breach at software company AllUnited (our translation from Dutch)11 November 2026
Confirmed by AllUnited: Software company AllUnited was hit by a hack on Monday evening, according to a statement on the company's website
Our translation from Dutch
Softwarebedrijf AllUnited is maandagavond getroffen door een hack, staat in een verklaring op de website van het bedrijf
News reportNOSSports association data on the street due to data breach in management system (our translation from Dutch)10 November 2026
News reportNOSSports association data on the street due to data breach in management system (our translation from Dutch)10 November 2026
Archived copy Wayback Machine, 11 November 2026

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

If All United had your data

Look for All United’s own notice or letter: it should say what of yours was involved. Keep it.
Change your All United password, and the same password anywhere else you use it. Turn on two-step sign-in.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
Your email address is out: expect convincing phishing. Open All United by typing its address yourself, never through a link in an email or text, and check the sender before you reply.
Your phone number is out: ask your mobile operator for a PIN or port-out lock, so nobody can move your number to another SIM card and take your login codes.
Your home address is out: be wary of letters, parcels or visitors that mention All United, and of texts asking for a “delivery fee”.
Expect scams that use your details: calls, texts or emails pretending to be All United, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use All United? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the All United breach

Was All United hacked?

NOS, Security.nl and NRC reported a data breach at All United (Netherlands) on 10 November 2026, and it has been confirmed. How it happened, by the sources: hacking, through AllUnited.

What data was exposed in the All United breach?

Financial account and card details, Passwords and logins, Email addresses, Phone numbers, Dates of birth, Names, Addresses and Cities, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a All United data breach settlement?

No settlement open for claims is on record for All United as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the All United breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to All United’s own site, or check the letter here.

More breaches in Netherlands

Every breach in Netherlands →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.