Back Streamlinefeed.Co.Ke

Ransomware Gang Holds Stade Francais Player Data for Ransom

Streamlinefeed.Co.Ke • August 7, 2026

Eighteen identity documents, published online as proof of a breach, and a ten-day deadline: Paris rugby giant Stade Francais is fighting a ransomware siege as the Top 14 season opens.

The club confirmed it is the victim of a cyber attack after the Qilin ransomware group, a Russian-speaking operation known for demanding large payments, listed Stade Francais on its leak site on August 5, 2026. French media report the attackers published identifiable documents belonging to 18 players and set a ten-day window for payment.

“Immediate containment, investigation and recovery measures have been implemented to secure the affected systems and ensure business continuity,” the club said in a statement. Online ticketing, club shop sales and merchandise websites are not affected, it said.

Rugbyrama reports Qilin granted the club ten days to pay before further material is released. The breach was discovered on August 5, according to threat-intelligence trackers ransomware.live and Breachsense, which both attribute the attack to Qilin.

The group is best known outside sport for the 2024 attack on Synnovis, the NHS medical services provider, which disrupted blood tests and forced rerouted procedures across London hospitals. Its business model is double extortion: encrypt the victim’s systems, then publish stolen files on a deadline until the ransom is paid.

Stade Francais joins a lengthening list. The French Rugby Federation suffered an operational lockdown from ransomware, the Olympic Games were targeted in both 2018 and 2026, the NBA’s Houston Rockets faced a mass data-leak threat in 2021, and Ajax saw web vulnerabilities exposed earlier this year.

Stade Francais itself has history: industry reports in 2023 said the club inadvertently leaked server source code, exposing information publicly to actors who could have modified systems on the club’s website. The club is one of two Parisian Top 14 sides and will face the Vodacom Bulls, Northampton Saints, Bath and Cardiff in this season’s Investec Champions Cup.

The Vodacom Bulls’ shared pool means shared competition data, travel logistics and player-administration channels that cross through European Professional Club Rugby systems. South Africa’s Information Regulator, which enforces the POPIA data-protection law, and Kenya’s Office of the Data Protection Commissioner both treat exposed identity documents as notifiable breaches — the legal standard the club now faces under EU rules.

For franchises from Pretoria to Paris, the lesson is identical: player identity documents are now a ransomware asset class, and the ten-day clock is the new transfer window.

The club says business continuity is secured; the players whose passports now sit on a leak site may read that sentence differently.

The documents, data and reporting consulted for this article. Links open the original material so readers can inspect the evidence directly.

Includes 1 primary source

Keep the conversation in one place—threads here stay linked to the story and in the forums.

Start a conversation this story and keep it linked here.

E-sports and Gaming Community in Kenya

The Role of Technology in Modern Agriculture (AgriTech)

Popular Recreational Activities Across Counties

Investing in Youth Sports Development Programs

No weak match is forced. These are the latest verified stories from Security & Crime.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Stade Francais Faces Ransomware Attack from Qilin Group Stade Francais, a prominent rugby club in Paris, confirmed a ransomware attack by the Qilin group, which has published identity documents of 18 players as proof of the breach. The attack was detected on August 5, 2026, and the group has set a ten-day deadline for ransom payment. Stade Francais stated that immediate containment and recovery measures are in place, and online ticketing and merchandise sales remain unaffected. The Qilin group is known for its double extortion tactics, encrypting systems and threatening to release stolen data if the ransom is not paid. This incident adds to a growing list of ransomware attacks targeting sports organizations and highlights the vulnerability of player identity documents. The club faces potential legal repercussions under EU data protection laws due to the exposure of sensitive information. The breach follows a history of security issues at Stade Francais, including a previous incident in 2023 involving the unintentional leak of server source code. 1 sources 68

Extracted Entities

Ransomware Gang Holds Stade Francais Player Data for Ransom

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (2)

Industries (1)

MITRE ATT&CK (2)

Ransomware Groups (2)