// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-hibpDTG 0600Z
ColdRecon / Breach Radar / Pass'Sport
Breach Record

Pass'Sport

DISCLOSED 2025-12-17 · STOLEN CREDS · 6,366,133 RECORDS EXPOSED

In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum. Initially misattributed to CAF (the French family allowance fund), the data contained 6.5M unique email addresses affecting 3.5M households. The data also included names, phone numbers, genders and physical addresses. The Ministry of Sports subsequently released a statement...

The record

What we know

Disclosed
2025-12-17
Attack vector
Stolen Creds
Records exposed
6,366,133
Domain
pass.sports.gouv.fr
Data classes exposed
Email addressesGendersNamesPhone numbersPhysical addresses
Sources

Cited reporting

↗ Have I Been Pwned (2026-01-18)
Similar vector · recent

Other stolen creds breaches on file

23andMe · 2026-06-01 Krispy Kreme · 2026-06-01 Gravity Bridge · 2026-05-31 Atlas Menu · 2026-05-30 Krispy Kreme · 2026-05-29 Krispy Kreme · 2026-05-28 Mytheresa · 2026-05-28 Charter · 2026-05-23

This page is the permanent ColdRecon entry for the Pass'Sport disclosure. It updates if new public reporting emerges. All tracked breaches →

Pass'Sport just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →