Ajax were alerted to a massive vulnerability by a journalist. In their official statement, the club admitted that a "hacker in the Netherlands unlawfully" gained ...