USA Cycling has taken a crash into hot water, after a recent hack and data breach has compromised its members’ data. The cycling organization, recognized by the International and United States Olympic Committees, has reported what it describes as a “data security incident,” which has put the personal information of its users at risk and is requiring a mass password reset.

The reports of the incident state that a hacker accessed some of USA Cycling’s databases within recent weeks. Fortunately, important information such as financial information or Social Security Numbers were not compromised, although things like names, physical and email addresses, birth dates, and passwords were put at risk.

Sadly, USA Cycling’s security was exceedingly out-of-date; passwords were not stored in an encrypted form, and the IT system it was using was over a decade old and difficult to upgrade.

Still, the organization has admitted its fault in failing to maintain high security standards, and will be completely revamping its website and IT systems. This includes new security questions for user authentication, and encrypted passwords. Members will also be receiving password reset emails soon, and it’s recommended that they change any identical passwords they may use on other websites.

USA Cycling has also been in contact with the authorities and hired a cyber-security expert to help resolve the matter. The systems have been secured, so members’ information should be safe once more.

Letting its security fall grow that old and antiquated was a big mistake on the organization’s part, although it has owned up to the mistake. Still, this is a stark reminder of the importance to maintain up-to-date security; even if attacks can’t be prevented entirely, the damage could have been mitigated and the attack more difficult to pull off had USA Cycling’s cyber-security been better.

Photo by Historyworks Photography