LDLC ASVEL confirmed data theft after NoEscape ransomware listing

The NoEscape ransomware group added LDLC ASVEL Villeurbanne, the French professional basketball club owned by former NBA player Tony Parker, to its dark web extortion portal on October 9, 2023. The club said it only learned of the listing on October 12, when journalists contacted it about the entry.

NoEscape claimed to hold 32 gigabytes of material taken from the club, including players' passports and identity cards, financial, tax and insurance records, banking details, non-disclosure agreements, player scouting and recruitment contracts and thousands of other confidential documents. The group threatened to publish everything unless ASVEL negotiated.

The club retained cyber security specialists, who confirmed on October 18 that attackers had breached its systems and exfiltrated data. ASVEL issued a press statement acknowledging the intrusion, said its day to day operations had not been interrupted, and said it had found no evidence that supporters' ticket payment or bank account details had been taken.

ASVEL reported the incident to CNIL, France's data protection authority, and said a formal complaint to law enforcement would follow. Its entry was later removed from NoEscape's leak site and no stolen data was published. BleepingComputer noted that a removed listing can indicate negotiations are under way.