The French football club Olympique de Marseille (OM) confirmed it was the target of an “attempted” cyberattack after a threat actor claimed to have breached its systems and leaked a sample of stolen data on a hacking forum. 

Incident Details

• Discovery and Disclosure: The club issued a statement on Tuesday following a threat actor’s claim on Monday that they had accessed OM’s servers earlier in February 2026.
• The Leak: A threat actor, using the alias “Indra,” claimed to be selling a database containing information on approximately 400,000 members and fans. The alleged data includes personally identifiable information (PII), physical addresses, phone numbers, order histories, and staff emails.
• Club Response: Marseille management clarified that the figure of 400,000 affected accounts is “greatly exaggerated.” They emphasized that no banking data or passwords were leaked or exposed during the intrusion.
• Operational Impact: Technical glitches on the official website have been resolved. However, as a precaution, the club is reissuing e-tickets for upcoming fixtures, including the Ligue 1 match against Lyon on March 1 and the Coupe de France quarter-final against Toulouse on March 4. Only tickets downloaded after February 25 are valid. 

Actions Taken

The club has initiated an in-depth investigation and taken the following official steps: 

Advised supporters to maintain digital hygiene, such as strengthening passwords and remaining vigilant against phishing attempts.

Filed a formal complaint with CNIL (France’s National Commission for Informatics and Liberties).

Notified relevant judicial authorities.