78,133 members affected by claimed data leak at FFPLUM

On 8 January 2026, the French Microlight Federation (FFPLUM) — the national governing body for ultralight and microlight aviation in France — disclosed that it had been the victim of a data theft affecting its members. A leaked database of roughly 78,133 rows was tied to the federation's online services, part of a broader wave of breaches that hit French sports federations and administrations in early 2026.

According to the federation's communiqué, the breach stemmed from fraudulent access to an existing administrator account on its licence-management platform, operated by a third-party service provider. Using that compromised account, the attacker was able to extract member records from the system.

The exposed data covered the following categories:

• Names, first names and civil status
• Dates and places of birth
• Postal addresses and postal codes
• Email addresses and phone numbers
• Nationality and professional information

FFPLUM stated that no banking data, health information or account passwords were compromised. The federation said its service provider immediately secured the environment once the incident was detected, and that it had notified the CNIL and ANSSI, filed a criminal complaint, and warned members to be alert to phishing and credential-stuffing attempts that could exploit the leaked contact details.