Dfb.de

In November 2016 reports emerged of a massive data breach initially attributed to the German Football Association website Dfb.de. The incident involved approximately 3.3 million records followed by a much larger release of 16 million records. Subsequent forensic analysis by security experts revealed that the data did not originate from the Dfb.de infrastructure but was likely a large aggregated collection of credentials from multiple unknown sources. The dataset primarily consisted of email addresses and passwords making it a significant risk for credential stuffing attacks against German users.