Champions Cup rugby team hacked in ransom attack with player data at risk
Champions Cup rugby club Stade Francais has said it is the victim of a cyber attack, with reports stating players’ identity documents are being held to ransom. Cybercriminals have reportedly threatened to release documents relating to players, having already unveiled a number of identifiable documents belonging to 18 players. “Immediate containment, investigation and recovery measures [...]
French rugby club Stade Francais has fallen victim to a ransomware attack, with players' identity documents at risk. Cybercriminals have threatened to release sensitive player information, having already exposed data from 18 players. The club has stated that they are taking immediate measures to contain the issue and secure their systems.
Stade Francais, a Top 14 club from Paris, will compete in the Investec Champions Cup this year against teams such as the Vodacom Bulls, Northampton Saints, Bath Rugby, and Cardiff Rugby. The club is coached by former Harlequins boss Paul Gustard and featured England center Joe Marchant last year. Some sources suggest the attackers may be the Russian-speaking ransomware group Qilin, known for targeting high-profile organizations like the NHS.
Stade Francais's online ticketing, shop sales, and merchandise websites remain unaffected by the attack. This is the latest in a series of cyber attacks on sports organizations, following major breaches in 2021 involving the NBA's Houston Rockets and football club Ajax. The French Rugby Federation also experienced an operational lockdown due to ransomware.
In 2023, Stade Francais inadvertently leaked its server source code, exposing information publicly. The club has filed a complaint with authorities prior to the return of the Top 14 in September, with the team hosting visitors Perpignan.
Written by urgent.news from City AM's reporting — not their text. Machine-written — it may contain errors, so check the original before relying on it.