French basketball team ASVEL confirms data breach, ransomware threat

Prominent French professional basketball team ASVEL, known for its impressive track record of 21 national championships and 10 cups, has officially acknowledged a data breach following a claim by the NoEscape ransomware gang.

 

Based in Villeurbanne, Lyon, and led by former NBA star Tony Parker, the team said that the breach came to its attention on October 12 when they were alerted by the press regarding their inclusion on the NoEscape ransomware gang’s extortion portal, which occurred on October 9, 2023.

 

In a press statement, ASVEL disclosed, "Alerted on October 12 through the press and having immediately contacted companies specializing in the field of cybersecurity, LDLC ASVEL is unfortunately today able to confirm that it has indeed been the victim of a violation of its computer system, with data exfiltration."

 

According to reports, the threat actors have claimed to have stolen 32 GB of data, encompassing personal data of players, passports, ID cards, and an array of documents related to finance, taxation, legal matters, NDAs, contracts, and confidential letters. The stolen data also allegedly includes contractual agreements with players, raising concerns about the potential fallout from its exposure.

 

The NoEscape ransomware gang has threatened to publish this stolen data unless ASVEL engages in negotiations for a ransom payment by October 20, 2023. ASVEL took prompt action, retaining cybersecurity specialists who, on October 18, 2023, confirmed the breach of the club’s systems and the theft of data. Although the breach has not affected the club’s daily operations, ASVEL is diligently assessing potential harm to third parties whose data has been exposed.

 

Of particular concern is the payment information of individuals who have made purchases such as tickets, merchandise, and club membership cards through the official website. ASVEL has reported that, to date, there is no evidence to suggest that the attackers have gained access to the financial information or bank account details of their fans.

 

The club has also taken the responsible step of notifying CNIL (Commission Nationale de l’Informatique et des Libertés), the French national data protection authority, and is preparing to file a formal complaint with law enforcement agencies.

 

In a noteworthy development, ASVEL has been removed from the NoEscape ransomware gang’s darknet portal, and the original entry link now yields a "404 error." No data has been leaked as of now, raising speculation that negotiations may be underway to prevent the data’s public release.