Pass'Sport Data Breach Data Breach
| Company | Pass'Sport |
|---|---|
| Breach Date | December 17, 2025 |
| Disclosure Date | January 18, 2026 |
| Records Affected | 6.4 million |
In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum. Initially misattributed to CAF (the French family allowance fund), the data contained 6.5M unique email addresses affecting 3.5M households. The data also included names, phone numbers, genders and physical addresses. The Ministry of Sports subsequently released a statement acknowledging the incident.
What Happened
In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum. Initially misattributed to CAF (the French family allowance fund), the data contained 6.5M unique email addresses affecting 3.5M households. The data also included names, phone numbers, genders and physical addresses. The Ministry of Sports subsequently released a statement acknowledging the incident.
What Data Was Exposed
- Email addresses
- Genders
- Names
- Phone numbers
- Physical addresses
Who Is Affected
Anyone who had an account with Pass'Sport before December 2025 may be affected. The breach exposed 6.4 million records.
How to Check If You Were Affected
Visit haveibeenpwned.com and enter your email address to check if you were included in this breach.
What You Should Do Now
- Watch for phishing emails. Scammers may use your leaked email to send targeted phishing attempts. Be extra cautious of unexpected emails.
- Be wary of suspicious calls/texts. Your phone number may be used for smishing or vishing attacks.
- Enable two-factor authentication. Add 2FA to your accounts wherever possible for extra security.
- Consider identity monitoring. A monitoring service can alert you to suspicious activity.
Last updated: January 20, 2026