“`html
French Football Federation Hit by Major Cyberattack: Millions of Member Records Compromised
PARIS, France – November 27, 2025
In a concerning advancement for the global football community, the French Football Federation (FFF) has confirmed it was the target of a notable cyberattack. The breach, which occured recently, compromised sensitive personal data belonging to millions of its members. The federation announced the incident this Wednesday, November 26th, revealing that the attack specifically targeted “footclubs,” the software used by clubs across France for administrative management, including the handling of player and licensee information.
This incident raises serious questions about data security within sports organizations, echoing similar concerns seen in other major sports leagues and federations worldwide. Think of the potential fallout if a similar breach were to occur within U.S. Soccer or a major collegiate athletic association – the implications for privacy and trust are immense.
What Happened and Who’s Affected?
The FFF stated that the cyberattack was an “act of cybermalveillance,” leading to the theft of personal data. While the exact number of affected individuals is still being assessed, initial reports suggest that data for up to three million people could have been compromised [[1]]. This includes information likely used for registration, licensing, and general member management within the French football system.
The software in question, “Footclubs,” is a critical tool for the day-to-day operations of countless amateur and professional clubs. Its compromise means that the personal details of players, coaches, administrators, and possibly even youth league participants could now be in the hands of malicious actors.
Federation’s Response and Official Statements
Following the discovery of the breach, the FFF acted swiftly to inform the relevant authorities. A formal complaint has been filed,and the National Agency for Information Systems Security (ANSSI) and the National Commission for Information Technology and Liberties (CNIL) have been notified [[3]]. This multi-agency involvement underscores the seriousness of the situation.
In a statement, the FFF confirmed the cyberattack and the subsequent data theft, emphasizing that the “Footclubs” software was the target Related reading
