Data Breach Communication | OneFootball

Juventus Football Club S.p.A. informs you that a data breach has recently been identified affecting the systems of an external sub-supplier engaged to provide photographic services in connection with certain events organised by the Club.

The incident did not in any way involve the IT systems of Juventus Football Club S.p.A., which remain fully operational and uncompromised.

The breach concerned an archive of photographic images taken at Club events, mainly sporting events, between July 2023 and December 2025, depicting individuals present at those events. While, at this stage, there is no evidence suggesting any unlawful use of the images, as a purely precautionary measure it cannot be excluded that they may potentially be misused. For this reason, anyone who becomes aware of any unusual use is invited to report it promptly.

As soon as it became aware of the incident, the Company promptly initiated the appropriate checks and notified the breach to the Italian Data Protection Authority (Garante per la protezione dei dati personali), in accordance with Regulation (EU) 2016/679 (GDPR). Juventus Football Club S.p.A. also recommended to the relevant sub-supplier certain containment and remediation measures, including disconnecting the device used from the Internet and changing the access credentials to the devices and systems used.

Given the nature of the events concerned and the high number of participants, including minors, Juventus Football Club S.p.A. considered it appropriate to issue this communication in the interest of maximum transparency and care towards all individuals potentially involved.

For further information, you may contact Juventus Football Club S.p.A. at the dedicated address privacy.databreach@juventus.com, or the Data Protection Officer (DPO) at privacy@juventus.com, indicating in the subject line “Data Breach Information Request”.