Hackers take a swing at the Ryder Cup
Criminals hijacked PGA servers, locking officials out of crucial tournament files
Hackers have targeted the governing body of international golf tournaments, the PGA, by locking officials out of crucial files.
The staff of the Professional Golfers' Association (PGA) realised on Tuesday morning that the systems had been compromised when attempts to access files for the upcoming tournaments generated an ominous message.
"Your network has been penetrated," the message stated. "All files on each host in the network have been encrypted with a strong algorithm. This may lead to the impossibility of recovery of certain files."
The files are allegedly related to this week's PGA Championships at Bellerive Country Club and next month's Ryder Cup in France and contain creative materials, such as extensive promotional banners and logos used in digital and print communications. There are even unseen designs for logos for future PGA events.
The hackers encrypted the files for ransom, offering a Bitcoin wallet number, but no ransom amount has been specified.
According to Golfweek, a spokesperson for the PGA said it would not comment on the situation as it is still ongoing and that the organisation had not yet resolved the issue.
Barry Shteiman, VP of research and innovation at Exabeam, highlighted the conundrum facing organisations that fall victim to ransomware.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
"To pay or not to pay, that is the seemingly million-dollar question when it comes to ransomware," Shteiman said. "While many security experts warn about paying ransoms or entering into negotiations, the answer, in reality, comes down to simple economics.
"If the downtime caused by data being unavailable, or by the backup restoration process is more expensive than paying the ransom, then organisations should pay. Equally, if giving up on the encrypted data has a higher cost in lost revenue or intellectual property than remediation, then you can also see why an organisation would pay the ransom."
Over the last couple of years, a number of sporting events have been targeted by hackers, such as the Winter Olympic in North Korea, last season's Champions League Final in Kiev and this summer's World Cup, where Android users were tricked with malicious apps called 'Golden Cups'.
A study of ransomware victims released in March found that of those that paid up only 49% had their data handed back to them. Interestingly, of those that refused to pay, a staggering 89% said they eventually recovered their data.
Bobby Hellard is ITPro's Reviews Editor and has worked on CloudPro and ChannelPro since 2018. In his time at ITPro, Bobby has covered stories for all the major technology companies, such as Apple, Microsoft, Amazon and Facebook, and regularly attends industry-leading events such as AWS Re:Invent and Google Cloud Next.
Bobby mainly covers hardware reviews, but you will also recognize him as the face of many of our video reviews of laptops and smartphones.
-
Companies are still paying ransoms to cyber criminals despite official adviceNews A Proofpoint survey found evolving ransomware techniques and the use of AI is exacerbating the situation for victims
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals

