---
title: "Data breach at Doinsport"
description: "Doinsport, a French software provider for sports club management, suffered unauthorized access to an old, unused marketplace server on September 23, 2026, with copied data reportedly dating from before 2021. An actor on a cybercrime forum claims to be reselling a database of 54,545 user accounts and"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-09-24-doinsport
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-09-24
dateModified: 2026-09-24
---
# Doinsport

Data breach — High

Doinsport, a French software provider for sports club management, suffered unauthorized access to an old, unused marketplace server on September 23, 2026, with copied data reportedly dating from before 2021. An actor on a cybercrime forum claims to be reselling a database of 54,545 user accounts and 176,242 client records from clubs across France, including names, contact details, dates of birth, and booking history. Doinsport confirmed the incident, stated its current software was not affected and that no banking data, passwords, health data, or ID documents were involved, and said it has filed a complaint and notified the French data protection authority (CNIL).

The exposed contact details and birth dates, linked to sports booking habits, expose affected individuals to targeted phishing attempts.

| Fact | Value |
| --- | --- |
| Disclosed on | September 24, 2026 |
| Incident dated | September 23, 2026 |
| Accounts affected | 54,545 |
| Sector | Digital services |
| Country | France |
| Cause | Misconfigured database |
| Severity | High |
| Status | Confirmed |

## Exposed data

- Full name
- Email address
- Phone number
- Postal address
- Date of birth
- Customer ID
- Order history
- Other personal data

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Doinsport](https://frenchbreaches.com/alertes/doinsport-muffxg0l7wvtj6cqckl) — FrenchBreaches
- [Doinsport : 1,75 million de réservations de la plateforme sportive revendiquées](https://www.cyberattaque.org/cyberattaque-doinsport-175-million-de-reservations-de-la-plateforme-sportive-revendiquees/) — Cyberattaque.org
- [Doinsport : fuite de données revendiquée visant 54 545 comptes utilisateurs](https://fuitesinfos.fr/article/2026-09-24-doinsport) — Fuites Infos

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-09-24-doinsport
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees