A football news website reported that malicious code had been distributed to visitors through advertisements early in November. The code was said to have collected information about website visits without requiring clicks, including IP addresses, viewed pages, language settings and operating-system details. It also reportedly attempted to access personal data on certain iPhone models, although it had not been established whether private data was taken.

The website said an unauthorised third party had accessed its management system and altered an advertising tag, allowing the code to be added. It said the code had been removed and the vulnerability in the advertising system corrected, while an investigation into possible consequences continued. Visitors using certain iPhone models without the latest security updates who visited the site on 1–3 November or 11 November were advised to take action according to guidance published on the site.