The Football Database breach: What 66,696 affected users need to know

The Football Database data breach, discovered on February 2, 2023, exposed the personal records of 66,696 users of the French football statistics platform at footballdatabase.eu. The breach recieved the full contents of the user account database, including email addresses, usernames, full names, and MD5 hashed passwords. What makes this incident occured worth close attention is the use of MD5, a hashing algorithm so widely known to be weak that modern cracking tools can reverse it in seconds.

Why MD5 Password Hashes Are Easily Cracked

MD5 was not designed as a password storage mechanism and has no defense against modern brute-force or rainbow table attacks. Attackers who obtain an MD5 hash can use precomputed lookup tables to recover the original password almost instantly for any common or moderately complex password. This means that for the 66,696 Football Database users in this breach, their passwords are effectively accessable in plaintext to any attacker who wants them.

What Was Exposed in the Football Database Breach

• Email Address
• Password Hash
• Username
• First Name
• Last Name

Why the Football Database Breach Still Matters Today

Credential data from breaches like this one continues to be used in credential stuffing attacks for years after the original incident. Users who registered on Football Database before February 2023 and reused their password on other platforms, including email providers, streaming services, or banking apps, remain at risk. The combination of email address, username, and crackable password hash provides attackers with a complete toolkit for account takeover.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to the database layer of a web application, often through SQL injection, exposed credentials, or misconfigured server permissions. Once inside, the attacker can export the full user table within minutes. Platforms that store passwords using outdated algorithms like MD5 amplify the damage of any breach because the extracted hashes convert to usable passwords with minimal effort.

Check If Your Data Was Exposed

HEROIC's breach database contains over 400 billion indexed records from known data leaks across the globe, including the Football Database incident. Enter your email address to instantly see whether your data was exposed in this breach or any other, and take action to change passwords and secure your accounts before your credentials are used against you.