The French Football Federation is suffering from a data breach that compromised club members’ data

• FFF breached via compromised account, exposing members’ personal data but not passwords or bank details
• Stolen PII includes names, birth information, contacts, and license numbers, enabling phishing risks
• FFF terminated access, alerted authorities, and continues to face repeated cyber attacks in recent years

The French Football Federation (FFF), the governing body of football in France, lost personally identifiable information (PII) about an as yet undisclosed number of members. The agency confirmed the news in a press release, saying data was lost in a cyber attack.

Earlier this morning, FFF said unnamed threat actors used a “compromised account” to access software it uses to perform administrative administration. It didn’t say what software it was or how the account was compromised, but we can assume it was either through phished credentials or via infostealer malware.