British Obstacle Sports recently identified and resolved a security incident affecting the britishobstacle.org website.

On 29 May 2026, malicious code was deployed to the British Obstacle Sports website following the exploitation of a vulnerability in a third-party WordPress plugin. The malicious content became active at approximately 21:02 BST on 29 May 2026 and remained present until it was fully removed and the issue resolved at 09:04 BST on 4 June 2026.

The compromise resulted in malicious code being displayed to some visitors to the website. The malicious content attempted to present a fake verification message that could have encouraged users to run software on their own devices. Users with anti-malware or endpoint protection software would typically have received warnings about this activity.

As soon as the issue was identified, the malicious code was disabled, unauthorised administrator accounts were removed, access logs were reviewed, and a detailed investigation was undertaken. Additional security measures are also being implemented to further strengthen the website.

Our investigation has found no evidence that member or user data held by British Obstacle Sports was accessed, compromised or extracted.

Importantly, the British Obstacle Sports website does not store membership records, athlete data, payment information, or other significant personal data relating to our members. The incident affected content displayed to website visitors rather than any database containing member information. Based on the evidence available, we have found no indication that personal data held by British Obstacle Sports was compromised as a result of this incident.

If you visited the British Obstacle Sports website between 29 May 2026 and 4 June 2026 and encountered unusual pop-ups, security warnings, or requests to run commands on your device, we recommend that you:

• Run a full antivirus or anti-malware scan on the affected device.
• Ensure your operating system and security software are fully up to date.
• Change passwords for important online accounts if you followed any instructions presented by the malicious content.
• Contact us if you believe you may have been affected.

We apologise for any concern this incident may have caused and would like to thank members of the obstacle sports community who reported the issue, enabling us to investigate and resolve it.

If you have any questions regarding this incident, please contact us at info@britishobstacle.org.