Olympique de Marseille Confirms Cyberattack After Threat Actor Claims Data Breach French football giant Olympique de Marseille (OM) has acknowledged a cyberattack after a threat actor claimed to have breached the club’s systems earlier this month. The 126-year-old club, a historic Ligue 1 side and the first French winner of the UEFA Champions League in 1993, confirmed the incident in a statement on Tuesday. The threat actor, who posted on a hacking forum, alleged they stole a database containing personal information on 400,000 individuals, including staff and supporters. The leaked sample reportedly includes names, addresses, order details, email addresses, and phone numbers. Additionally, the attacker claimed to have accessed 2,050 Drupal CMS accounts, with 34 linked to OM staff and 1,770 to contributors and moderators. In its official response, Olympique de Marseille stated that its technical teams and external experts swiftly contained the attack, ensuring operations continued securely. The club reassured fans that no banking details or passwords were compromised but has since reported the incident to France’s data protection authority (CNIL) and filed a formal complaint. While investigations into the breach’s full scope are ongoing, the club advised supporters to watch for potential phishing attempts. The threat actor, who listed the stolen data for sale, claimed the breach occurred in February 2026 though this timeline remains unverified. As of now, OM has not provided further details on the attack’s origin or the extent of the exposed data.