[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2mfbyt98optyh":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":13,"contentUpdatedAt":14,"source":15,"sourceUrl":16,"sourceUrls":17,"pwnCount":18,"affectedCount":18,"affectedCountStatus":19,"affectedCountLowerBound":20,"affectedCountUnit":21,"hasEnglishDescription":4,"severity":22,"dataClasses":23,"description":28,"seoTitle":16,"seoTitleEn":29,"seoDescription":16,"seoDescriptionEn":30,"logoUrl":31,"isVerified":4,"isSensitive":32,"isSpamList":32,"isMalware":32,"company":33},"68e3266eda11adda488251cb","ffr","Fédération Francaise de Rugby Data Breach","fdration-francaise-de-rugby","ffr.fr","2023-07-06T00:00:00.000Z","2025-05-22T22:28:19.000Z","2025-05-24T01:55:38.000Z","2026-07-19T00:18:04.905Z","Third party breach","",[],281977,"known",null,"unknown","High",[24,25,26,27],"Dates of birth","Email addresses","Names","Phone numbers","\u003Cp>Fédération Francaise de Rugby is the rugby federation in France. As a result of the event and ransom attempt in the summer of 2023, approximately 282 thousand unique email addresses; along with full names, dates of birth, and phone numbers were affected.\u003C\u002Fp>\u003Cp>This record should be evaluated in the context of sports federation member and contact data. In the statements made by the federation, it was stated that the incident focused especially around email servers and contact data. Password or financial data is not within the verified scope for this record.\u003C\u002Fp>\u003Ch2>Leaking Data Types and Risks\u003C\u002Fh2>\u003Cp>In record Fédération Francaise de Rugby, the data categories tracked should be considered as birth dates, email addresses, full name information, and phone numbers. Birth dates are persistent personal data that can be used in identity verification questions, age-based targeting, and profile enrichment. Email addresses can be used for targeted phishing, password reset scenarios, and account matching across different services. Full name information makes fake support, fake donation, fake delivery, or customer service messages more convincing. Phone numbers allow the establishment of personalized fraud scenarios through SMS, calls, and messaging applications.\u003C\u002Fp>\u003Cp>When date of birth, name, phone, and email are together, fake club, license, membership, ticket, camp, or federation notification messages can become more convincing. Since there may be data of children and young athletes in sports communities, communication messages should be handled carefully.\u003C\u002Fp>\u003Ch2>Verified Scope and Boundaries\u003C\u002Fh2>\u003Cp>This record is associated with the domain ffr.fr and the 2023 event. The scope is limited to birth dates, email addresses, names-surnames, and phone numbers. Password, payment, license number, or health information is not a verified data class for this record.\u003C\u002Fp>\u003Cp>Fields not present in this record should not be described as if they were leaked. Full payment card, bank information, official ID, private message, health data, student file, password, or financial data should only be included in the risk assessment if they are explicitly present in the record. The text is based on verifiable data classes and the known boundaries of the incident.\u003C\u002Fp>\u003Ch2>User Groups at Risk\u003C\u002Fh2>\u003Cp>Members of the French Rugby Federation, club representatives, athlete families, people using phone\u002Femail in licensing or event processes, and users who respond quickly to federation messages are at higher risk.\u003C\u002Fp>\u003Cp>Users who use the same email address across different services, repeat their old passwords, share their phone and address information on many platforms, or clearly use their real identity on community\u002Fevent accounts are at higher risk. The privacy impact in records with political, student, or official identity context can be heavier than in normal commercial records.\u003C\u002Fp>\u003Ch2>Urgent Measures to Be Taken\u003C\u002Fh2>\u003Cp>Users must verify license renewal, payment, camp, ticket, or document request messages coming on behalf of the federation or club through the official channel. Since the password leak is not verified, the main focus is to distinguish social engineering messages.\u003C\u002Fp>\u003Cp>Users in the positive match area should update their passwords on accounts where they use the same or similar passwords, enable two-step verification where possible, and check recent sessions. Records that do not contain passwords but include contact, donation, address, event, or student data should be monitored for unexpected calls, offers, support, and verification messages.\u003C\u002Fp>\u003Ch2>Long-Term Security Strategies\u003C\u002Fh2>\u003Cp>In the long term, the habit of using a password manager, unique passwords, two-factor authentication, and removing unnecessary personal information from accounts reduces risk. Reusing the same email address across different platforms makes it easier to combine data from different breaches; using a separate email or alias for critical accounts can be considered.\u003C\u002Fp>\u003Cp>Contact information shared with sports federations and clubs should be regularly reviewed. Families and athletes should use only verified channels for official federation procedures.\u003C\u002Fp>\u003Ch2>Record Control and User Action\u003C\u002Fh2>\u003Cp>LeakData check indicates whether the queried email address is present in this record. A positive result does not necessarily mean that all data fields definitely belong to that user; however, it is a sufficient warning for precautionary measures. A negative result only indicates that there is no match in this dataset and does not eliminate the possibility of appearing in other breaches.\u003C\u002Fp>\u003Cp>A positive result indicates that the email address is present in the Fédération Francaise de Rugby records. This result does not imply a password or financial data leak; however, it requires attention due to the context of the date of birth and phone number.\u003C\u002Fp>","Fédération Francaise de Rugby Data Breach (282 Thousand Reported Records)","Fédération Francaise de Rugby Data Breach. 282 Thousand reported records were reported. Reported data: Dates of birth, Email addresses, Names. Review the…","\u002Fuploads\u002Flogo\u002Fffr_fr.webp",false,{"name":34,"sector":35,"country":36,"website":10,"websiteArchiveUrl":16,"websiteStatus":16,"websiteCheckedAt":20},"Fédération Francaise de Rugby","Sports Federation","France"]