Leeds United suffered a cyber-attack between 19th and 24th February 2025, targeting the retail website, resulting in the card details of a small number of customers being compromised.

The club has communicated with all of those directly impacted and is continuing to work with the Information Commissioner’s Office.

A forensic investigation was undertaken by a specialist third-party as soon the club discovered the breach, and measures were implemented to stop and recover from the attack.

The club is disappointed that the attack was successful despite layers of cyber security, and offer our sincere apologies to anyone who has been adversely affected.