FFP Data Breach: French Football Federation’s Cyberattack Revealed

The French Football Federation (FFF) Data Breach: What You Need to Know

The French Football Federation (FFF) recently announced a data breach where attackers gained access to administrative management software used by football clubs through a compromised account.

Upon detecting the unauthorized access, the FFF’s security team took immediate action by disabling the compromised account and resetting all user passwords within the system.

Unfortunately, before being removed from the breached systems, the threat actors managed to steal personal and contact information from members of French football clubs.

The FFF took immediate steps to secure the software and data by disabling the compromised account and resetting all user passwords. The breach was limited to specific data including name, surname, gender, date and place of birth, nationality, postal address, email address, telephone number, and license number.

Following European data protection regulations, the FFF filed a criminal complaint and notified France’s National Cybersecurity Agency (ANSSI) and the National Commission on Informatics and Liberty (CNIL).

The organization will directly inform individuals whose email addresses were compromised and advised members to be cautious of suspicious messages purportedly from the federation or their clubs.

Members of French football clubs were warned against opening attachments or providing account credentials, passwords, or banking information in response to any communication.

The FFF emphasized its commitment to data protection and continuous enhancement of security measures to combat cyberattacks effectively.

The French Football Federation did not provide immediate comments when contacted by BleepingComputer regarding the breach.

Earlier this month, the French social security service for parents and home-based childcare providers (Pajemploi) also experienced a data breach affecting approximately 1.2 million individuals.

See also  Government Access to Customer Data: Microsoft Hands Over Encryption Keys

Whether you’re cleaning up old keys or setting guardrails for AI-generated code, this guide helps your team build securely from the start.

Get the cheat sheet and take the guesswork out of secrets management.

Download Now