Company Details
federation-francaise-de-football
2,968
159,748
7112
fff.fr
0
FFF_6338841
In-progress

FFF - Fédération Française de Football Company CyberSecurity Posture
fff.frLa Fédération Française de Football (F.F.F) est une association loi 1901 reconnue d'utilité publique fondée le 7 avril 1919. Elle a notamment pour objet : - D'organiser, de développer et de contrôler l'enseignement et la pratique du football en France; - d’établir les règles techniques ; - De procéder aux sélections nationales ; - De délivrer des licences ; - De créer et de maintenir un lien entre ses membres et avec les organisations telles que les fédérations internationales, les organismes sportifs nationaux et les Pouvoirs Publics - De défendre les intérêts moraux et matériels du football français ; Près de 274 collaborateurs répartis sur 2 sites principaux travaillent chaque jour à l'organisation et à la promotion du Football français. - le siège, situé 87, boulevard de Grenelle à Paris 15ème. - le Centre National du Football, situé au Domaine de Montjoye à Clairefontaine.
Company Details
federation-francaise-de-football
2,968
159,748
7112
fff.fr
0
FFF_6338841
In-progress
Between 700 and 749

FFFDF Global Score (TPRM)XXXX

Description: Attackers stole member data from French Soccer Federation Pierluigi Paganini November 28, 2025 November 28, 2025 The French Soccer Federation (FFF) disclosed a data breach after hackers used a compromised account to steal member data. A compromised account allowed attackers to breach the French Soccer Federation (FFF), stealing data belonging to its members. The organization confirmed the cyberattack on Thursday, but did not disclose the number of members impacted. “The FFF reports that the software used by clubs for their administrative management, and in particular that of their members, has been the victim of a cyberattack and data theft.” reads the data breach notice. “Upon detection of this unauthorized access through the use of a compromised account, the FFF services took the necessary steps to secure the software and data, including immediately disabling the account in question and resetting all user account passwords.” The federation stated that the issue was resolved following the discovery of unauthorized access. The French Soccer Federation detected unauthorized access via a compromised account and immediately secured its systems by disabling the account and resetting all passwords. The organization filed a complaint and ANSSI and CNIL. The FFF will inform all individuals whose emails were in the database. The breach exposed only limited data, including name, surname, gender, birth details, nationality, postal address, email, phone number, and license number


FFF - Fédération Française de Football has 17.65% more incidents than the average of same-industry companies with at least one recorded incident.
FFF - Fédération Française de Football has 56.25% more incidents than the average of all companies with at least one recorded incident.
FFF - Fédération Française de Football reported 1 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.
FFFDF cyber incidents detection timeline including parent company and subsidiaries

La Fédération Française de Football (F.F.F) est une association loi 1901 reconnue d'utilité publique fondée le 7 avril 1919. Elle a notamment pour objet : - D'organiser, de développer et de contrôler l'enseignement et la pratique du football en France; - d’établir les règles techniques ; - De procéder aux sélections nationales ; - De délivrer des licences ; - De créer et de maintenir un lien entre ses membres et avec les organisations telles que les fédérations internationales, les organismes sportifs nationaux et les Pouvoirs Publics - De défendre les intérêts moraux et matériels du football français ; Près de 274 collaborateurs répartis sur 2 sites principaux travaillent chaque jour à l'organisation et à la promotion du Football français. - le siège, situé 87, boulevard de Grenelle à Paris 15ème. - le Centre National du Football, situé au Domaine de Montjoye à Clairefontaine.


The National Basketball Association (NBA) is a global sports and media organization with the mission to inspire and connect people everywhere through the power of basketball. Built around five professional sports leagues: the NBA, WNBA, NBA G League, NBA 2K League and Basketball Africa League, the

Major League Baseball (MLB) is the most historic professional sports league in the United States and consists of 30 member clubs in the U.S. and Canada, representing the highest level of professional baseball. Led by Commissioner Robert D. Manfred, Jr., MLB remains committed to making an impact in
.png)
The French Football Federation (FFF) disclosed a data breach on Friday after attackers used a compromised account to gain access to...
Millions of amateur football players in France may have had their personal data exposed after the French Football Federation (FFF) suffered...
Millions of amateur football players in France may have seen their personal data exposed after the French Football Federation (FFF) suffered...
Paris Saint Germain disputes FFF statement claiming chronic injury to young forwardOne Player, Two Different Stories: PSG and French FA in...
French football intends to have its own version of the Premier League, with a club-owned entity replacing the Ligue de Football Professionnel (LFP).
The Oceania Football Federation (OFC) has signed a Memorandum of Understanding (MOU) with the French Football Federation (FFF).
The Fédération Française de Football (FFF) has been informed of allegations regarding a potential security breach within their systems.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of FFF - Fédération Française de Football is http://recrutement.fff.fr.
According to Rankiteo, FFF - Fédération Française de Football’s AI-generated cybersecurity score is 712, reflecting their Moderate security posture.
According to Rankiteo, FFF - Fédération Française de Football currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, FFF - Fédération Française de Football is not certified under SOC 2 Type 1.
According to Rankiteo, FFF - Fédération Française de Football does not hold a SOC 2 Type 2 certification.
According to Rankiteo, FFF - Fédération Française de Football is not listed as GDPR compliant.
According to Rankiteo, FFF - Fédération Française de Football does not currently maintain PCI DSS compliance.
According to Rankiteo, FFF - Fédération Française de Football is not compliant with HIPAA regulations.
According to Rankiteo,FFF - Fédération Française de Football is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
FFF - Fédération Française de Football operates primarily in the Spectator Sports industry.
FFF - Fédération Française de Football employs approximately 2,968 people worldwide.
FFF - Fédération Française de Football presently has no subsidiaries across any sectors.
FFF - Fédération Française de Football’s official LinkedIn profile has approximately 159,748 followers.
FFF - Fédération Française de Football is classified under the NAICS code 7112, which corresponds to Spectator Sports.
No, FFF - Fédération Française de Football does not have a profile on Crunchbase.
Yes, FFF - Fédération Française de Football maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/federation-francaise-de-football.
As of November 29, 2025, Rankiteo reports that FFF - Fédération Française de Football has experienced 1 cybersecurity incidents.
FFF - Fédération Française de Football has an estimated 6,469 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint
Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.
Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.