Fédération Francaise de Rugby data breach: 281K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2025-05-22
In June 2023, the Fédération Francaise de Rugby (French Rugby Federation) suffered a data breach and attempted ransom. The breach exposed 282k unique email addresses along with names, dates of birth and phone numbers. The Federation subsequently published a disclosure notice and stated that the attack primarily affected email servers. Exposed data: dates of birth, email addresses, names, phone numbers. The breach dates from Jul 6, 2023; Have I Been Pwned loaded it on May 22, 2025.
What to do
- If you had a Fédération Francaise de Rugby account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch