The Escalation of digital Harassment

What began in May 2024 with threats against a specific player from Rosengård has since expanded to encompass more players and the entire league. The persistent nature of these digital attacks, coupled with the difficulty in identifying the source, has raised meaningful concerns about the safety and well-being of the athletes. This reflects a broader trend seen in the U.S., where athletes and sports organizations are increasingly vulnerable to cyber harassment and threats.

This is still digital stuff coming and it should, I think, can be traced. But this particularly seems impossible to track and I think that is really strange.

Tomas Hoszek, secretary general of elite football women (EFD)

Hoszek’s statement highlights the frustration and bewilderment surrounding the investigation, echoing the challenges faced by law enforcement in the U.S. when dealing with sophisticated cybercrimes. The anonymity afforded by the internet often shields perpetrators,making it tough to hold them accountable for their actions.

The Investigation and International Cooperation

While authorities in Sweden reported a breakthrough in the fall of 2024, obtaining IP addresses linked to the threats, these leads have yet to materialize into concrete charges. A significant hurdle lies in the international nature of online crime, requiring cooperation with foreign entities to trace the origins of the threats. Nils Norling,press spokesman in the Malmö police area,explained the delays:

If it is another state or a foreign company you are looking for help from,it will take a very long time to get answers to these questions. You should write a production, it should be taken to another country. Just when it comes to it, it takes a very long time.

Nils Norling, press spokesman in the Malmö police area.

The situation underscores the complexities of international law enforcement and the need for streamlined processes to address cyber threats that transcend national borders. In the U.S., the FBI and other agencies have established international partnerships to combat cybercrime, but these collaborations frequently enough face bureaucratic and logistical challenges.

Security Measures and League Response

In response to the ongoing threats, Swedish police urged clubs to report all incidents. While there was no blanket mandate for increased security at league matches, each club was responsible for assessing the risk and implementing appropriate measures in consultation with local police, the EFD, and the Swedish Football Association’s security department. Martin Fredman, security manager at the Swedish Football Association, emphasized the importance of supporting the players:

It looks a little different in the different associations, but I feel very confident that those with the experience that exists handle it in a wise way. the vital thing is that the player, and also relatives, feels that people are listening to them and that it is taken seriously.

Martin Fredman,security manager at the Swedish Football Association.

This approach highlights the importance of individualized security plans and open communication between players, clubs, and law enforcement. A similar approach is adopted in U.S. professional sports, with leagues like the NFL, NBA, MLB, and NHL having dedicated security teams and protocols in place to address threats against players and staff.

The Cybersecurity and Infrastructure Security Agency (CISA) also offers resources and guidance to sports organizations in the U.S. to bolster their cybersecurity posture. These resources include vulnerability scanning, incident response planning, and security awareness training for employees.

Cybersecurity Vulnerabilities in US Sports Sector

The threat to athletes and sports organizations is not unique to Sweden. In fact,the sports industry has become a prime target for cybercriminals. According to Reuters, professional sports teams have seen a meaningful rise in cybersecurity threats over the past decade. A 2020 survey from the UK’s National Cyber Security Center (NCSC) found that “70%…” of professional sports teams had experienced a cyber incident. This is due to a number of factors, including the high value of sports data, the increasing reliance on technology, and the relatively weak cybersecurity defenses of many sports organizations.

Some of the most common types of cyber threats facing the sports industry include:

• Data breaches: Cybercriminals can steal sensitive data such as player contracts, financial information, and fan data.
• Ransomware attacks: Cybercriminals can encrypt a sports institution’s data and demand a ransom to restore access.
• Distributed denial-of-service (DDoS) attacks: Cybercriminals can flood a sports organization’s website or network with traffic, making it unavailable to legitimate users.
• Social engineering attacks: Cybercriminals can use social engineering techniques to trick employees into revealing sensitive information or installing malware.

The FBI is actively addressing these issues in the US. They have issued several warnings for the sports industry, along with recommendations on how to prevent attacks.

Moving Forward: A Call for Proactive Cybersecurity Measures

The cyber threats facing the Damallsvenskan and the broader sports world serve as a stark reminder of the need for proactive cybersecurity measures. Sports organizations, both in Sweden and the U.S., must prioritize cybersecurity, invest in robust defenses, and foster a culture of security awareness among players, staff, and fans. Furthermore, international cooperation and information sharing are essential to effectively combat cybercrime and protect athletes from online harassment and threats. The safety and well-being of athletes depend on it.