2026 AFTT / FRBTT — 66,852 subscribers + plaintext club-admin passwords claim (unverified)
Data compromised
Actor claim (unverified): 66,852 subscriber records, 17,441 user records, 2,080 fine records, 87 club-admin accounts with plaintext passwords; names, emails, club/division/match/fine fields; ~1.69 GB
Technical writeup
Unverified forum sale — Dark Web Informer September 15, 2026. Actor Venus1337 offered alleged AFTT (Aile Francophone de Tennis de Table) and FRBTT (Fédération Royale Belge de Tennis de Table) data: 66,852 subscribers plus user/fine tables and plaintext club-admin passwords after claimed file-upload RCE. Federations had not publicly confirmed at catalog time. recordsAffected 66852 (unverified); companyConfirmed false.
Root cause
Unverified forum sale (actor Venus1337) alleging RCE via insecure file upload, webshell, and SQL access to AFTT/FRBTT systems