Pass'Sport — data breach (PassSport)

Domain: pass.sports.gouv.fr · Accounts affected: 6,366,133 · Data exposed: Email addresses, Genders, Names, Phone numbers, Physical addresses · Verified breach — In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum. Initially misattributed to CAF (the French family allowance fund), the data contained 6.5M unique email addresses affecting 3.5M households. The data also included names, phone numbers, genders and physical addresses. The Ministry of Sports subsequently released a statement acknowledging the incident.