Stade Français Paris Hit by Qilin Ransomware Attack, Data Leak Threatened French rugby club Stade Français Paris confirmed a cyberattack disrupted its information systems, though the club restored operations using clean backups. While its ticketing platform and online store remained unaffected, a sample of allegedly stolen data was published online. The club is investigating the breach’s scope and has notified authorities, filing a criminal complaint though it has not disclosed whether a ransom demand was made or negotiations are underway. The ransomware group Qilin claimed responsibility, posting documents belonging to 18 players on its darknet leak site and threatening further releases unless a ransom is paid by the end of next week. The authenticity of the leaked files has not been independently verified. Qilin, a prominent ransomware-as-a-service operation linked to Russian-speaking cybercriminals, employs double extortion tactics encrypting systems while stealing data to pressure victims into payment. The group has been active in targeting high-profile organizations, including sports teams. Stade Français joins a growing list of sports organizations victimized by cyberattacks. Recent incidents include Dutch soccer club Ajax (2024), Italian club Bologna FC (2024), Paris Saint-Germain (2024), Manchester United (2020), the Royal Dutch Football Association (2023), and the French Football Federation (2025). These attacks highlight the rising threat of financially motivated hackers against the sports sector.