FFF Confirms Cyberattack on 2.3 Million Members' Data

The French Soccer Federation, known as the FFF, confirmed on Thursday that it fell victim to a cyberattack, resulting in the theft of personal data belonging to its members. The breach targeted software used by licensed football clubs across France for administrative tasks, including player registration, and potentially exposed information for up to 2.3 million amateur players, according to the federation's latest public figures for the 2023-2024 season.

The intrusion occurred on November 20, when attackers gained unauthorized access through a compromised account, the FFF stated in a public notice. Upon detection, the federation's services acted swiftly to contain the incident. They immediately disabled the affected account and reset passwords for all users, securing the platform and preventing further access. "The issue was resolved following the discovery of this unauthorized access," the FFF said, emphasizing that only limited personal details were compromised.

The stolen data included names, surnames, gender, birth details, nationality, postal addresses, email addresses, phone numbers, and license numbers. The federation did not specify the exact number of individuals...