What Happened
In March 2026, cybersecurity intelligence identified a “Spite Leak” of Intersport Rent’s customer registry (associated with intersportrent.com and intersport-rent.fr), where a threat actor publicly released over 1.2 million rows of data covering nearly 500,000 unique profiles after failing to sell it or contact the company; the breach reportedly originated in 2025. The exposed data included extensive customer PII such as full names, verified email addresses, mobile phone numbers, and loyalty numbers, alongside behavioral details like order histories, rental equipment specifics, and customer reviews from European and global operations. This timed release during peak winter sports season heightened risks of personalized fraud, account takeovers, and credential stuffing targeting travel-related accounts. No official confirmation from Intersport Rent appears in available reports, distinguishing it from prior unrelated Intersport incidents like the 2024 intersport.fr breach or 2022 Hive ransomware attack.
