Yesterday, the French Rugby Federation (FFR) revealed it had been hit by a cyberattack.
Join RUCK’s Instagram broadcast channel and get the latest rugby news straight to your phone.
According to a French data breach tracking site, the incident exposed information belonging to 533,730 registered players spanning the years 2003 to 2026.
Details of the breach surfaced the same day on the Fuites Info platform, where the attackers also claimed responsibility. The leaked data reportedly includes basic personal details such as names and contact information, as well as more sensitive records like social security numbers and accident reports.
This dataset has since been obtained and circulated by cybercriminals, including being posted on a dark web forum by a group known as Cybernox.
In response, the FFR clarified that the breach did not stem from a direct compromise of its central databases. Instead, early investigations suggest the incident originated from a phishing campaign targeting licensed members, a form of digital identity theft.
The federation states it acted quickly to contain the attack and reduce its impact. As a precaution, it is advising all members to change their passwords and remain vigilant, and is directing them to official government cybersecurity resources for guidance on avoiding further threats.
