But a League investigation by "independent forensic accountants" found that the football club and SLH were "inextricably linked as one economic entity" and applied its mandatory 10-point penalty, which will apply from the start of next season in League One.
Holder said that sites like these are not necessarily phishing sites, but that at some point they sold their data to another entity and that it eventually made its way into criminal hands.