Football Derbies: 13,124 Dutch Sports Fan Accounts Exposed (2018)

Football Derbies Breach: 13,124 Dutch Football Fan Accounts Exposed (2018)

Football Derbies, a Netherlands-based reference platform documenting football rivalries from around the world, suffered a data breach in August 2018 that exposed 13,124 user accounts. The site, referencd by football fans for derby history and match data, stored its user pasword hashes in MD5 format -- a broken algorithm that can be cracked rapidly with modern tools. For Dutch and international football fans who registered on the platform, credential reuse on more sensitive accounts remains the primary ongoing risk.

Football Derbies 2018: Breach Summary

• Records Exposed: 13,124
• Data Types: Email addresses, MD5-hashed passwords
• Breach Type: Database breach -- Sports/Reference platform
• Country Affected: Netherlands
• Date Leaked: August 26, 2018

European Sports Fan Databases: A Consistent Target

Football fan communities and sports reference sites have been recurring breach targets across Europe. These platforms attract highly engaged, loyal user bases who register with real email addresses and often reuse passwords across multiple sports-related accounts. For threat actors running credential stuffing campaigns, sports fan databases represent a reliable source of active email addresses attached to users who are likely to have accounts on ticketing platforms, sports merchandise sites, streaming services, and social networks -- all high-value targets for account takeover.

The August 26, 2018 Breach Cluster

Football Derbies is one of several platforms that appear to have had data leaked or compiled on August 26, 2018, suggesting a coordinated collection and distribution event rather than individual targeted attacks. Multiple sites across different countries and industries -- education, automotive, hospitality, sports -- appear in breach records dated to the same day. This pattern is consistent with a combolist aggregation event where previously breached databases from various sources were compiled and released together on underground forums.

Check If Your Credentials Were Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records to find your email address in known data breaches -- including the Football Derbies leak. Scan your email now to see if your credentials have been compromised.