Leak at French Dance Federation

On 25 November 2025, the French Dance Federation (Fédération Française de Danse, FFDanse) — the national governing body for dance in France — disclosed a cyberattack against its extranet platform (extranet.ffdanse.fr). The intrusion, which took place in mid-November, damaged the server and gave attackers unauthorized access to licence-holders' personal data, affecting both the confidentiality and the integrity of the system.

The Federation stated that the compromised data was limited to identity and contact information together with hashed account passwords. It emphasized that no medical or banking data was held on the affected system or exposed.

Exposed data categories included:

• Licence number
• First name, last name and date of birth
• Postal address, email address and phone number
• Photos
• Hashed (encrypted) passwords

The Federation filed a criminal complaint and notified the CNIL, France's data protection authority. Extranet access for affiliated clubs and structures began to be restored from 15 November, with a temporary email-based two-factor authentication mechanism introduced in mid-December and individual licence-holder access expected to return in early January. Firewall and security upgrades were carried out as part of the remediation, and card payments were temporarily disabled. The number of affected licence holders was not disclosed.