Leak at Club de nation 95 (via ACRV)

On 27 December 2025, Club de nation 95 — a French swimming and aquatics club based in the Val-d'Oise (95) department — had the personal data of roughly 200 of its members exposed online. The leak did not stem from a compromise of the club itself but from its digital service provider, ACRV, whose hosting infrastructure was breached.

The incident was a third-party (supply-chain) compromise. According to the disclosures relayed on 27 December 2025, attackers gained unauthorized access to ACRV's web infrastructure — reported as WordPress, FTP and MySQL access — and defaced the affected sites. The breach cascaded to ACRV's client organizations, with around 900 customers affected in total; Club de nation 95 was one of them.

The exposed member records included:

• First and last name
• Postal address
• Email address
• Phone number
• IP address

The leak was confirmed by the breach-tracking source bonjourlafuite.eu.org and contemporaneous French reporting. No official statement from the club or details of the remediation response were available at the time of writing, so the overall status remains unknown.