499/68 Monday, December 1, 2025
The French Soccer Federation (FFF) has disclosed a data breach after attackers used a compromised user account to access the federation’s member management system. The breach resulted in the unauthorized extraction of personal information belonging to some members. Although the FFF has not yet confirmed the total number of affected individuals, it stated that once the incident was discovered, the compromised account was immediately disabled and all user passwords were reset to limit further damage.
According to the initial investigation, the accessed data includes names, surnames, gender, date and place of birth, nationality, address, email, phone number, and license numbers. The FFF confirmed it will notify all individuals whose email addresses appear in the database. The organization has also reported the incident to ANSSI and CNIL, France’s national cybersecurity and data protection authorities, and continues to investigate the identity of the attackers and the full scope of the impact.
The FFF advises members to be cautious of emails or messages impersonating the federation or their clubs-particularly those requesting password information, financial details, or prompting them to open attachments. The federation added that it is strengthening its cybersecurity measures to better handle the increasing volume and sophistication of cyberattacks today.
