Egyptian Football Association: player database and documents allegedly put up for sale

<p>On 26 July 2026, a forum user published to offer for sale data belonging to <strong>Egyptian Football Association</strong>, Egypt on a hacking forum. The claimed data includes player records, documents. A limited sample was published to support the claim.</p> <h2>What the source reveals</h2> <p>{'@DailyDarkWeb': "Base de données de l'Association Égyptienne de Football prétendument mise en vente Un acteur malveillant affirme vendre des bases de données prétendument appartenant à l'Association Égyptienne de Football (EFA), en publiant des captures d'écran et des détails pour étayer", '@DarkWebInformer': 'Base de données et documents des joueurs de la Fédération égyptienne de football prétendument divulgués Un acteur d’un forum affirme avoir divulgué des bases de données appartenant à la Fédération égyptienne de football, l’organisme dirigeant responsable du football en'}</p> <h2>Risks</h2> <ul> <li>Unauthorised access to sensitive organisational data that could be used for follow-on attacks</li> <li>Competitive intelligence loss if proprietary business information or trade secrets were exposed</li> <li>Reputational damage and erosion of customer, citizen, or stakeholder trust in the affected organisation</li> <li>Legal liability and regulatory fines under applicable data protection frameworks</li> </ul> <h2>What remains unknown</h2> <ul> <li>the total volume of data compromised and whether it includes additional categories beyond those disclosed</li> <li>the method by which the data was obtained - whether through a direct database compromise, an insecure API, or a third-party breach</li> <li>whether the data has been sold or distributed to additional parties beyond the forum post</li> </ul> <h2>Conclusion</h2> <p>This incident confirms that Egyptian Football Association's data has been compromised and is circulating on underground forums. Organisations in the sports sector should treat this incident as a reminder to audit access controls, monitor for anomalous data exfiltration, and ensure incident response plans address data publication scenarios. Affected individuals should change passwords and remain vigilant against phishing attempts.</p>