Fédération Française de Rugby data breach

The Fédération Française de Rugby (FFR) has faced two major cyber and data security incidents in recent years:

1. June 2023 Data Breach & Ransom Attempt

• What Happened: In June 2023, the FFR suffered a cyberattack and ransomware incident primarily targeting its email servers.

• Exposed Data: The breach compromised approximately 281,977 to 282,093 unique records, exposing sensitive personal information including:

• Names
• Email addresses
• Dates of birth
• Phone numbers

• Response: The Federation published a public disclosure notice following the attack. The incident was later cataloged by security tracking platforms like Have I Been Pwned and XposedOrNot.

2. March 2026 Phishing-Linked Cyberattack & Legal Action

• What Happened: In March 2026, the FFR was targeted by a new cyberattack connected to a targeted phishing campaign aimed at its members (which represents roughly 350,000 registered licensees).

• Impact: While the FFR stated that the attack did not directly compromise its core IT infrastructure, threat actors attempted online fraud, and a database allegedly linked to members surfaced on cybercrime forums.

• Response: The FFR responded with emergency security measures, filed an official legal complaint, and reported the incident to France's data protection authority (CNIL) and relevant government cybersecurity services.

In order to protect yourself, we recommend the following:

1. Monitor your credit report for any suspicious activities. If you cannot do this yourself, make use of any service that does this on your behalf.

2. Be on the lookout for an increase in number of spam or scam calls and emails. We recommend you make use of Apps like True Caller, which can assist you in identifying any possible spam or scam calls.

3. Be sure to monitor your bank account transactions. Ensure you receive real time notifications on any transaction.