French Football Federation suffers data breach that compromised Club member’s data

• FFF breached via compromised account, exposing members’ personal data but not passwords or banking info
• Stolen PII includes names, birth details, contacts, and license numbers, enabling phishing risks
• FFF terminated access, alerted authorities, and continues facing repeated cyberattacks in recent years

French Football Federation (FFF), the governing body for football in France, lost personally identifiable information (PII) on a yet undisclosed number of members. The agency confirmed the news in a press release, in which it said the data was lost in a cyberattack.

Earlier this morning, the FFF said that unnamed threat actors used a “compromised account” to access software it uses to carry out administrative management. It did not say which software that was, or how the account was compromised, but we can assume it was either through phished credentials, or via infostealer malware.