Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Browse News Feed Stats Watchlists Beta About Contact

French Football Federation football license holder data leak

Data Leak
First reported
Last updated
Happening score
H score 16
2 unique sources, 2 articles

Summary

Hide ▲

The French Football Federation (FFF) confirmed unauthorized access to its club-management platform, exposing personal data for millions of amateur football players in France. The intrusion is believed to have happened on November 20 and was disclosed on November 26. Exposed records included names, birth dates, addresses, phone numbers, email addresses, and Football license ID numbers. The leak raises follow-on risk from phishing scams and identity abuse.

Timeline

  1. 28.11.2025 12:06 1 articles · 6mo ago

    Compromised account grants unauthorized access to FFF platform

    Exploitation Observed

    A compromised account gave unauthorized access to the French Football Federation's club-management software platform on November 20, 2025, putting personal data for millions of amateur football players in France at risk. The exposed records included names, genders, dates of birth, birth locations, nationalities, postal addresses, email addresses, phone numbers, and Football license ID numbers.

    Show sources
    Open in new tab
  2. 26.11.2025 02:00 2 articles · 6mo ago

    FFF discloses unauthorized access to its club-management platform

    Initial Disclosure

    On November 26, 2025, the French Football Federation disclosed unauthorized access to the software platform used by licensed football clubs in France to manage administrative tasks, including registering players with the federation. The federation warned that the incident could expose millions of amateur football players in France to phishing scams and identity abuse.

    Show sources
    Open in new tab
  3. 26.11.2025 02:00 2 articles · 6mo ago

    FFF deactivates account and resets passwords

    Mitigation Patch Update

    After detecting unauthorized access via a compromised account on November 26, 2025, the French Football Federation secured the software and data by immediately deactivating the affected account and resetting all user account passwords. These actions were taken to limit further unauthorized access to the affected club-management environment.

    Show sources
    Open in new tab
  4. 26.11.2025 02:00 1 articles · 6mo ago

    FFF notifies French regulators and files complaint

    Legal Policy Action Update

    On November 26, 2025, the French Football Federation filed a complaint with the French authorities and notified the French Data Protection Agency (CNIL) and the French Cybersecurity Agency (ANSSI). The federation also planned to inform every affected individual whose email address was present in the compromised database.

    Show sources
    Open in new tab