Doinsport
HighConfirmedDigital services
Doinsport, a French software provider for sports club management, suffered unauthorized access to an old, unused marketplace server on September 23, 2026, with copied data reportedly dating from before 2021. An actor on a cybercrime forum claims to be reselling a database of 54,545 user accounts and 176,242 client records from clubs across France, including names, contact details, dates of birth, and booking history. Doinsport confirmed the incident, stated its current software was not affected and that no banking data, passwords, health data, or ID documents were involved, and said it has filed a complaint and notified the French data protection authority (CNIL).
The exposed contact details and birth dates, linked to sports booking habits, expose affected individuals to targeted phishing attempts.
- Disclosed on
- September 24, 2026
- Incident dated
- September 23, 2026
- Accounts affected
- 54,545
- Sector
- Digital services
- Country
- France
- Cause
- Misconfigured database
Exposed data
- Full name
- Email address
- Phone number
- Postal address
- Date of birth
- Customer ID
- Order history
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact