ConfirmedData breach

Pass'Sport: a data breach

In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum . Initially misattributed to CAF (the French family allowance fund), the data contained 6.5M unique email addresses affecting 3.5M households. The data also included names, phone numbers, genders and physical addresses. The Ministry of Sports subsequently released a statement acknowledging the incident .

The record

Organisation
Pass'Sport
Identity
Pass'Sportidentified by its domain in a verified breach record
Records affected
6,366,133 records
Data exposed
Email addresses, Genders, Names, Phone numbers, Physical addresses
Sector
Not recorded
Occurred
2025-12-17
Disclosed
2026-01-18
First recorded here
2026-09-09

Sources (1)

One source so far.

  1. Have I Been PwnedFirst reported

    2026-01-18

Pass'Sport: a data breach | NexaPulse