Trade press and privacy roundups in late February 2026 summarized a cyberattack against Olympique de Marseille, including forum marketing of a database with roughly 400,000 individuals and fields such as names, addresses, phones, emails, and order-style metadata. The club publicly discussed an attempted attack and, in early statements, often excluded banking credentials and passwords from confirmed exposure—readers should track any CNIL or consumer notices for final scope.
Canonical record: Olympique de Marseille 2026 on BreachHistory.
Sources: BleepingComputer, SC Media