---
title: "Data breach at Fédération belge de taekwondo (Taekwondo.be) et Coachbelgium.be"
description: "On 4 October 2026, a user of a cybercriminal forum announced the sale of databases attributed to Taekwondo.be, described as the website of the Belgian taekwondo federation, and Coachbelgium.be, a platform for sports coaches in Belgium. The seller claims 599,803 records covering 53,580 people, includ"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-04-federation-belge-de-taekwondo-taekwondo-be
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-04
dateModified: 2026-10-04
---
# Fédération belge de taekwondo (Taekwondo.be) et Coachbelgium.be

Data breach — Critical

On 4 October 2026, a user of a cybercriminal forum announced the sale of databases attributed to Taekwondo.be, described as the website of the Belgian taekwondo federation, and Coachbelgium.be, a platform for sports coaches in Belgium. The seller claims 599,803 records covering 53,580 people, including about 47,648 medical certificates, 2,683 national registry numbers, 2,407 IBANs and about 39,000 hashed passwords. The data would also include names, dates of birth, addresses, email addresses, phone numbers, membership details and invoices. These figures come from the seller and have not been confirmed; how the data was obtained has not been established.

Medical certificates, national registry numbers and IBANs, combined with identity and contact details, would let a malicious third party attempt identity fraud or targeted phishing.

| Fact | Value |
| --- | --- |
| Disclosed on | October 4, 2026 |
| Incident dated | October 4, 2026 |
| Accounts affected | 53,580 |
| Sector | Nonprofits |
| Country | Belgium |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Reported |

## Exposed data

- Full name
- Date of birth
- Postal address
- Email address
- Phone number
- Customer ID
- Connection data (IP, logs)
- Password (hashed)
- Banking data (IBAN, card)
- Identity document
- Health data
- Order history
- Other personal data

## What you can do

- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- Health data is “special category” data under the GDPR: a leak opens a right to compensation, and the organisation must notify the DPA within 72 hours.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Fédération Belge de Taekwondo](https://frenchbreaches.com/alertes/f-d-ration-belge-de-taekwondo-muu0b20duvxzilati3) — FrenchBreaches

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-04-federation-belge-de-taekwondo-taekwondo-be
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees