Pass'Sport: a data breach
In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum . Initially misattributed to CAF (the French family allowance fund), the data contained 6.5M unique email addresses affecting 3.5M households. The data also included names, phone numbers, genders and physical addresses. The Ministry of Sports subsequently released a statement acknowledging the incident .
The record
- Organisation
- Pass'Sport →
- Identity
- Pass'Sportidentified by its domain in a verified breach record
- Records affected
- 6,366,133 records
- Data exposed
- Email addresses, Genders, Names, Phone numbers, Physical addresses
- Sector
- Not recorded
- Occurred
- 2025-12-17
- Disclosed
- 2026-01-18
- First recorded here
- 2026-09-09
Fastnexa security experts
Worried the same could happen to your company?
If you are a customer or supplier of Pass'Sport, or work in the same industry, a Fastnexa security expert can tell you what this means for your data and test whether the same attack would work on you.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Sources (1)
One source so far.
- Have I Been Pwned ↗First reported
2026-01-18