French Football Federation Confirms Data Breach

The French Football Federation, the governing body for soccer in France, confirmed on Thursday that it had fallen victim to a cyberattack, resulting in the theft of personal data belonging to its members. The breach targeted the software platform used by licensed clubs nationwide to manage administrative tasks, including player registrations.

The federation detected the unauthorized access on November 20 through a compromised account, according to its statement. Upon discovery, FFF officials immediately disabled the affected account and reset passwords for all users to secure the system and protect the data. The organization described the incident as a "cybermalicious act" but emphasized that the breach was limited in scope, exposing only basic personal information such as names, surnames, gender, birth details, nationality, postal addresses, email addresses, phone numbers, and license numbers.

The FFF has filed a formal complaint with French authorities and notified the National Agency for the Security of Information Systems, known as ANSSI, as well as the National Commission for Informatics and Liberties, or CNIL, which oversees data protection. The federation plans to contact...