Attackers used a compromised account to access the French Football Federation’s club administration software and stole members’ personal and contact information (names, demographics, and contact details) before the account was disabled and passwords reset.