Manchester United Bugging – Privacy is on the Line

The recent security breach for Manchester United, bugging incident, where a covert listening device was installed in the team’s locker room, has highlighted alarming concerns about the privacy and security of players, staff, and sensitive internal discussions. The device, a cheap mobile phone used as a bug, allowed unauthorised third parties to eavesdrop on confidential information, including tactical strategies and personal conversations. Luckily, it seems the device didn’t gather video footage too. While this might shock fans Technical Surveillance Counter Measures (TSCM) specialists, Verrimus, have been issuing warnings about these very risks for years. Despite these cautions, the sporting industry, particularly football, has been slow to act. The Manchester United breach underscores the urgent need to address this issue head-on.

Growing Threats to Sports Teams’ Privacy

With rapid advances in technology, planting listening devices and other surveillance tools has become easier and more widespread. High-profile organisations, especially in the world of professional sports, are particularly vulnerable. Football clubs are attractive targets due to the large amounts of sensitive information they handle. They hold sensitive information like player contracts and transfer negotiations to medical records and tactical discussions. Worse still perhaps, surveillance threats extend beyond business matters. Private areas like locker rooms, toilet facilities and even player vehicles at risk of voyeuristic and personal attacks. The reputational damage that covert cameras in bathrooms or vehicle trackers placed to monitor players’ movements can cause is devastating.

Leaked information can compromise competitive integrity, damage reputations, and even expose teams and players to financial or physical risks. The recent Manchester United incident is just the latest in a series of events that highlight how vulnerable clubs can be, even at the highest levels of competition. The simple device used in this instance, allowed unauthorised parties to overhear critical strategic conversations, demonstrating that no space is truly secure without the right precautions.

Why Is the Sporting Industry Failing to Protect Itself?

Despite repeated warnings from experts like Verrimus, the sporting industry has been slow to implement robust counter-surveillance measures. There are several reasons for this; ranging from complacency and a lack of awareness to the misconception that high-profile clubs, with their substantial resources, are being protected. Many organisations rely on traditional security measures such as CCTV and on-site personnel, falsely assuming these are sufficient to guard against modern surveillance threats.

However, as Sarah Saul from Verrimus explains, this is far from true. “We’ve experienced first-hand just how little some clubs in the UK Premier League understand about technical surveillance. In fact, we’ve been approached to advise on several RFQs (requests for quotations) from clubs seeking to improve the level of service they receive from their contracted TSCM suppliers. Many clubs simply aren’t asking the right questions in order to procure a TSCM service that is fit for purpose. They’re often unaware of what a comprehensive counter-surveillance solution entails, focusing on basic or outdated measures instead of the multi-layered security approach that’s required to truly protect sensitive information. It’s not just about having a service; it’s about having the right service. Many Clubs rely on ‘private investigators’ who wave a wand around and declare a space ‘clear’. They display no understanding of current or emerging threats, install methods or countermeasures. It’s laughable!”

This lack of awareness means that many clubs are leaving themselves open to potentially devastating breaches. Rivals, media outlets, criminal organisations, or even malicious individuals looking to exploit confidential or personal information can easily take advantage of the industry’s outdated security practices. As surveillance technology advances, the sporting world remains increasingly vulnerable unless these threats are taken seriously.

Liability? Who Will Be Held Responsible?

When it comes to personal, professional or reputational damage that may be experienced by a player or other staff member, the Management of the Club will be held responsible if they are judged to have failed to recognise and adequately mitigate the risk. The Management of Health and Safety at Work Regulations require that an employer must suitably assess work-based activities and implement any appropriate controls to manage potential risks to the health, safety and welfare of employees (and others).

What are the responsibilities of the employer? Employers have a duty to:

• Appoint competent person(s) to manage workplace health and safety
• Provide adequate and proportional health and safety training for employees
• Ensure that there are suitable procedures in place in the event of an emergency event
• In workplaces where employees may be exposed to noise, vibration, substances hazardous to health, etc, there may be a requirement for provision of relevant health surveillances too
• Carry out a suitable and sufficient assessment of risks presented to the health, safety and welfare of employees (and others) through operational activities
• Carry out specific such risk assessments presented to the vulnerable person(s)

The Importance of TSCM Awareness Training

In response to these growing threats, Verrimus has developed TSCM Awareness Training programs, specifically tailored to the sporting industry. These courses are designed to educate key decision-makers—such as boards, management teams, and staff—on the nature of modern surveillance threats and how to mitigate them. The training covers potential vulnerabilities, the types of devices used to compromise privacy, and how to implement effective counter-surveillance measures.

One critical lesson from these training programs is how easy it can be for unauthorised individuals to gain access to sensitive information without anyone noticing. This was the case in the Manchester United incident, where the bugging device was placed in the locker room—an area generally considered secure. As Verrimus emphasises, even in seemingly safe environments, regular TSCM sweeps and preventive measures are essential. Clubs must stay vigilant and proactive in securing their spaces.

Time for a Change: The Path Forward

The Manchester United bugging incident serves as a wake-up call for the entire sporting industry. For too long, clubs have assumed they are safe from such threats, but this breach proves that even the most well-resourced organisations are at risk. The sporting world can no longer afford to ignore the evolving risks of surveillance.

As Sarah Saul and Verrimus have repeatedly stressed, football clubs need to understand that modern surveillance is a serious threat, and without the right countermeasures, they will remain vulnerable. TSCM Awareness Training offers a clear path forward, equipping teams with the knowledge and tools they need to protect themselves.

In today’s high-stakes environment, protecting privacy isn’t just about safeguarding conversations—it’s about securing competitive integrity, financial assets, and reputations. Leaked tactical information could give rivals an advantage, while stolen personal data could lead to disastrous situations for players and their families. Given the millions of pounds at stake, investing in comprehensive counter-surveillance services is not just a necessity, but a fundamental part of doing business at the top levels of sport.

Conclusion

This latest Manchester United bugging, privacy breach should push football clubs and sports organisations to act before they become the next victims. With companies like Verrimus offering TSCM solutions, including awareness training and surveillance detection services the tools to protect against these threats are readily available.

For organisations who do not wish to outsource their technical surveillance countermeasures service delivery, Verrimus also offer in-house capability training support.

This helps an organisation to;

• understand technical surveillance,

• recruit or assign operators,

• procure or lease measurement equipment,

• train operators,

• report findings

Having their own in-house specialists who deal with all aspects of technical surveillance (TSCM-bug sweeping, secure communications, privacy protection solutions) means less chance of compromise. Clubs with their own internal capability can have their dressing rooms, hotel suites, training areas and meeting rooms regularly surveyed. They are also able to extend the privacy protection services to their investors and guests within corporate boxes etc.

It’s time for the sporting industry to prioritise security, close the knowledge gaps, and invest in the right counter-surveillance measures. Failure to do so could result in further damaging incidents, not just to the clubs, but to the entire sport itself. The need for robust TSCM measures is no longer optional—it is essential to the future of professional football.