French Football Federation Data Breach Following Cyberattack
“`html
French Football Federation Data Breach
The French Football Federation (FFF) disclosed a data breach on Friday after attackers used a compromised account to gain access to administrative management software used by football clubs.
After detecting the unauthorized access, FFF’s security team disabled the compromised account and reset all user passwords across the system.
However, before they were detected and evicted from the breached systems, the threat actors stole personal and contact data from members of French football clubs.
“Upon detection of this unauthorized access through the use of a compromised account, the FFF services took the necessary steps to secure the software and data, including instantly disabling the account in question and resetting all user account passwords,” the FFF saeid [[[[machine translation].
“This breach is limited to the following data only: name, surname, gender, date and place of birth, nationality, postal address, email address, telephone number and license number.”
Impact and Affected Data
The compromised data includes a significant amount of Personally Identifiable Information (PII). this type of data is highly valuable to cybercriminals for identity theft, phishing campaigns, and other malicious activities. The specific data points stolen - name, surname, gender, date and place of birth, nationality, postal address, email address, telephone number, and license number – provide a comprehensive profile of individuals associated with French football clubs.
Regulatory Response and Notification
As required under European data protection regulations, the organization has filed a criminal complaint and notified france’s National Cybersecurity Agency (ANSSI) and the National Commission on Informatics and Liberty (CNIL), the country’s data protection authority

