What data is included in the Al-Nassr FC breach?

The Al-Nassr FC dataset reportedly contains 197 confidential documents including player contracts, national IDs, passports, and official team documents for a squad with total market value of €138.13 million. The breach allegedly includes sensitive documents of high-profile players including Cristiano Ronaldo.

What Asian football data was compromised?

Over 86,000 records of Asian football personnel including more than 3,000 Asian referees and over 83,000 Asian national players from Middle East and Beyond regions. Data includes AFC IDs, full names, dates of birth, passport numbers, and nationality information covering countries like China, UAE, Saudi Arabia, Japan, Iran, Jordan, Qatar, and Kyrgyzstan.

When was this breach discovered?

The threat actor posted the databases for sale on December 29, 2025. The exact timing of the initial breach has not been disclosed.

Who is selling the football databases?

A threat actor known as 'Demetrius' is offering both datasets for sale at 101 XMR (Monero cryptocurrency) through escrow transactions on DarkForums, with proof of funds required before receiving samples.

What is the asking price for the databases?

The threat actor is selling both datasets for 101 XMR (Monero) as an exclusive one-time sale. The transaction requires escrow through DarkForums' official middleman service with proof of funds required before sample access.

Has this breach been verified?

The authenticity has not been independently verified by Al-Nassr FC, the Asian Football Confederation, or third-party security researchers. The threat actor has provided sample data showing player information and signed contracts as proof.

How many incidents has Demetrius been involved in?

The Demetrius threat actor has been linked to at least 20 incidents since September 2025, targeting organizations across Saudi Arabia, USA, Iran, India, and France in sectors including sports, wholesale, IT services, e-commerce, hospitality, tourism, and education.

Data Breaches

Al-Nassr FC Confidential Documents and 68K Asian Football Personnel Records Offered for Sale

, and Dark Web Informer

December 29, 2025 . 4:55 PM

10 min read

API Access for Researchers & Security Teams

SOC teams, researchers, and security professionals can integrate Dark Web Informer's threat intelligence directly into their workflows via API. Access real-time breach data, threat feeds, and monitoring capabilities programmatically.

Learn About API Access

Disclaimer

This breach alert includes material that may contain personally identifiable information (PII) gathered strictly from publicly available sources. All information is provided solely for cybersecurity awareness and threat intelligence purposes.