The Portuguese hacker behind Football Leaks handed over 3 terabytes of documents that eventually helped bring down Man City

[Hollow Coder]

Rui Pinto, a Portuguese computer hacker from Vila Nova de Gaia near Porto, founded the Football Leaks website in September 2015, publishing confidential club documents including internal emails covering sponsorship deals and payment arrangements. Pinto reportedly provided over 3 terabytes of illegally obtained data, roughly equivalent to 3,000 copies of the Encyclopedia Britannica, to the German outlet Der Spiegel and the European Investigative Collaborations consortium, initially making contact with a journalist under the pseudonym John.

The leaked documents implicated major football figures including Cristiano Ronaldo, Lionel Messi and Neymar, alongside clubs such as Manchester City, Benfica and FC Porto, and the resulting revelations directly triggered the Premier League's financial investigation into Manchester City that would eventually run for eight years. That investigation culminated in a September 2026 verdict finding City guilty of 114 out of 115 charges relating to financial rule breaches, making Pinto's leaked material a direct root cause of one of English football's biggest ever disciplinary cases.

Pinto's own legal journey proved considerably rockier than the impact of his leaks. He was arrested in Hungary in 2019 and extradited to Portugal, where a 2023 trial found him guilty of attempted extortion, illegal data access and breach of correspondence, resulting in a four year suspended sentence. A second trial began in Lisbon in January 2025 with its outcome still pending, and Pinto has at various points been placed in witness protection, held in solitary confinement, and subjected to house arrest throughout the lengthy legal process. Journalist Winterbach, who worked with him, described Pinto as a very impressive character, very focused and very idealistic about the topics he uncovered.

Rui Pinto: The hacker who tried to take down Manchester Citywww.bbc.co.uk

[Quarry]

3 terabytes of data equivalent to 3,000 copies of the Encyclopedia Britannica is such a useful way to actually grasp the sheer scale of what Pinto managed to extract and hand over, that is an enormous volume of confidential material by any standard.

[Sharp Shannon]

Winterbach's description of Pinto as idealistic about the topics he uncovered is an interesting characterization, worth remembering that motive does not change the fact he broke real laws to get this information, even if the information itself proved to be substantially accurate.

[Slate Kev]

Three terabytes is a staggering amount of material, and the real achievement was not merely obtaining it but making sense of it. Raw documents do not explain themselves. Journalists had to authenticate files, connect names across contracts, understand football finance, and separate genuine evidence from misleading fragments.

That is why the story should not be reduced to a dramatic battle between a lone pirate and wealthy clubs. It was also a major collaboration between investigative reporters, lawyers, editors, and sources. The documents mattered because people spent years turning them into clear, verifiable reporting.

Whether the revelations "brought down" Manchester City is more debatable. Legal and sporting consequences depend on jurisdiction, rules, limitation periods, and evidence standards. Still, exposing how clubs operate behind the scenes can change the sport even when a specific punishment does not follow.

[Barry1]

Naming Ronaldo, Messi and Neymar alongside the club level revelations is a good reminder that Football Leaks was never just about club finances, it exposed a huge amount about how the biggest individual stars in the sport were also being compensated behind the scenes.

[AlphaLeo72]

The Rui Pinto story is extraordinary, but calling him simply a hacker misses the scale of what happened. Football Leaks turned hidden contracts, image-rights arrangements, agent fees, and club communications into evidence that journalists could examine rather than rumours to argue about in pubs.

That said, the ethical picture is not clean. Breaking into systems and taking private documents is illegal, even when the material later exposes conduct that deserves scrutiny. The public interest in the information does not automatically erase the harm caused by the method of obtaining it.

The important consequence was accountability. Football had become very good at hiding behind layers of companies and legal language, and the leaks forced questions into the open. Whether every case led to a fair outcome is another matter, but the old assumption that money could remain invisible was badly shaken.

[Isabella_61]

The irony of a suspended sentence and years of legal jeopardy for the person whose leaks eventually helped expose 114 out of 115 genuine financial rule breaches is hard to ignore, his methods were clearly illegal but the substance of what he uncovered held up.

[StormForge89]

Eight years between the leaks first surfacing and Manchester City's actual guilty verdict is an extraordinarily long gap, shows just how slowly major financial disciplinary cases in football can genuinely move even once the underlying evidence already exists.

[Elizabeth_14]

The fascinating part is how Football Leaks changed the balance of power in football journalism. Clubs and governing bodies had budgets, lawyers, and carefully managed public statements; Pinto introduced a mountain of paperwork that made those statements much harder to control

There is a tempting romantic story here: one outsider takes on the football establishment and wins. Reality is messier. The leaks raised legitimate public-interest issues, but they also involved privacy, stolen data, and information that may have been incomplete without context. Fans should be careful not to treat every leaked line as a final verdict

Even so, the impact was enormous. Football can survive a bad refereeing decision, but it cannot easily shrug off documents showing how money and influence move through the game. The sport may still have secrets, but the assumption that nobody can look behind the curtain has gone

[AmberCrossing]

Being placed in witness protection, solitary confinement and house arrest at various points throughout this process shows just how seriously the fallout from these leaks was treated, well beyond what a typical data leak case usually involves for the person responsible