262,925 licensed members affected by a claimed data leak at FFB

On 8 January 2026, the French Bridge Federation (FFB) — the national governing body for competitive contract bridge in France — was named in a claimed data leak affecting 262,925 of its licensed members. The dataset surfaced on a cybercrime forum, where it was offered alongside the member bases of dozens of other French sports and games federations.

The incident is part of a broader campaign that hit more than 30 French federations across late 2025 and early 2026. Investigators and reporting (notably ZATAZ) traced the wave to a vulnerability in a shared IT service provider that managed member-licensing portals and administrative spaces for multiple federations, making it a supply-chain compromise rather than an isolated breach of the FFB's own systems. A threat actor operating under the handle "TheFrenchGuy" claimed responsibility for several of the stolen federation databases and advertised them for sale.

The data exposed in this category of leaks consistently includes member identity and contact details:

• First name and last name
• Date of birth
• Postal address
• Email address
• Phone number
• Federation membership / licence number

The leak is described as a claim, and the FFB had not published a detailed confirmation of scope at the time of reporting; the figure of 262,925 records corresponds to the federation's licensed-member base. The wave of federation breaches prompted scrutiny from the French data protection authority (CNIL), which announced reinforced controls on sports federations for 2026. Affected members were urged to remain alert to phishing and identity-fraud attempts using the leaked details.