The FIFA WorldCup 2018 Breach Could Let Someone Steal Your Identity

HEROIC analysts identified the FIFA WorldCup 2018 breach dataset while reviewing aggregated personal information collections circulating on hacking forums in 2024. The data, originating around January 2018, contained 1,656,793 records tied to individuals who attended or registered for events related to the 2018 FIFA World Cup held in Russia. The exposed information included email addresses, phone numbers, full names, and birth dates for hundreds of thousands of people. What makes this dataset beleived to be especially dangerous is the combination of identity fields, which together are enough to impersonate a real person online.

How Attackers Use Your Name, Birthday, Phone, and Email Together

Each piece of data in this breach is useful on its own, but together they form a complete identity package. Criminals use this combination to pass identity verification checks, reset account passwords by answering security questions, and convince customer service teams to hand over account access. Phone numbers allow attackers to intercept text message verification codes through SIM swapping. Birthdays are used to answer common security questions or verify identity with banks and government services. This type of combined data is occured frequently in fraud rings that target financial accounts and government benefit programs.

What Was Exposed in the FIFA WorldCup 2018 Breach

• Email Address
• Phone Number
• First Name
• Last Name
• Birthday

Why Personal Details Are as Dangerous as Passwords

Many people assume a breach is only serious if passwords are included, but identity data like names, phone numbers, emails, and birthdays can cause just as much harm. This combination is enough to open fraudulent accounts in your name, apply for credit, file false tax returns, or conduct targeted phishing attacks that appear completely legitimate because the attacker already knows your real personal details. Victims of this type of identity data exposure face long-term risks including financial fraud, account takeover, and damage to their credit records that can take years to resolve.

How Database Breaches Work

A database breach occurs when an unauthorized person gains access to the backend storage system of a website or service. In many cases, attackers exploit vulnerabilities in web applications, use stolen administrator passwords, or find databases that have been accidentally left open to the internet. Once they have access, they copy the entire user table and take it offline. The data is then sold, traded, or published on dark web forums. Large events like the FIFA World Cup attract millions of registrations, creating a large and valuable target for attackers who want to gather identity data at scale.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email address against more than 400 billion records, including the FIFA WorldCup 2018 dataset and thousands of other known breaches. Visit HEROIC.com to run a free search and find out exactly what personal information of yours is circulating online, then take action to protect yourself before it is used against you.