French Basketball Federation Targeted Again in New Data Leak Claim

Details of the August 2026 Data Listing

According to statistics published by the user “weykofa,” the offered archive totals approximately 839.1 megabytes across roughly 2,000 files in JSON, CSV, and PDF formats. The vendor lists the contents as including 75,831 individuals, 6,873 clubs, 16,681 email addresses, and 2,030 curriculum vitae (CV) documents. The poster has set a price of 700 dollars payable in Bitcoin for the complete database, while noting that the asking price remains open to negotiation. FrenchBreaches noted that these figures reflect solely the claims made by the vendor on the cybercriminal forum and do not independently verify the exact count of unique individuals affected.

Sample Data and Potential Security Risks

To substantiate the claim, the vendor attached a structured data sample alongside the forum post. Examination of this sample reveals records pairing individual identities with associated contact details. Visible fields include first and last names, telephone numbers, email addresses, postal addresses, municipal locations, and club or sports structure names. While the sample demonstrates that certain records successfully link personal contact info with club affiliation, FrenchBreaches confirmed that the provided capture does not clarify the exact contents of the 2,030 CVs or confirm whether all 75,831 listed persons share the same depth of exposure. Combining real names, addresses, and organizational affiliations heightens the risk of targeted phishing campaigns, identity theft, and fraud aimed at participants within French basketball.

Prior Security Incidents at the FFBB

This incident follows a series of prior cybersecurity challenges for the governing body. The FFBB previously suffered a ransomware attack in June 2019, though no data exfiltration was formally identified at that time. A more severe compromise was detected on April 17, 2026, which potentially exposed information relating to 2 million licensed players and approximately 900,000 legal representatives. It remains unconfirmed whether the August 2026 listing represents a fresh network intrusion or simply repackaged data sourced from an earlier breach.

Verification Status and Official Standing

As of mid-August 2026, neither the origin of the files, their exact age, nor the precise method of acquisition has been independently verified. FrenchBreaches elected to anonymize the circulating sample entirely, omitting names, phone numbers, and addresses to prevent further dissemination. The metrics and assertions remain unconfirmed claims originating from an underground forum thread rather than an official statement from the Fédération française de basketball.