The French Football Federation (FFF) has disclosed a data breach affecting members of football clubs across France after attackers gained unauthorized access using a compromised account.
🔐 What happened?
Attackers accessed administrative management software used by clubs. FFF’s security team acted quickly — disabling the breached account and resetting all passwords — but not before personal data was stolen.
📛 Exposed data includes:
- 👤 Name & surname
- 📅 Date & place of birth
- 🏳️ Nationality
- 🏠 Postal address
- ✉️ Email address
- 📞 Phone number
- 🆔 Licence number
- ⚥ Gender
⚠️ No financial information or passwords were exposed, but the stolen data can still be misused for phishing and targeted scams.
📣 What FFF is doing:
- Filed a criminal complaint
- Notified ANSSI & CNIL (French cybersecurity & data protection authorities)
- Will notify all affected members directly
🚨 If you're a French club member:
Be cautious of:
- Emails pretending to be from FFF or your club
- Messages requesting credentials, banking info, or asking you to open attachments
- Unexpected links or “urgent” requests
The FFF says it is reinforcing its security posture to combat the growing wave of cyberattacks targeting major organizations.
Stay alert, and verify before clicking. 🛡️
