Leak at French Strength Federation

On 14 January 2025, the Fédération Française de Force (FFForce) — France's governing body for strength sports (powerlifting, weightlifting and bodybuilding) — was reported as one of the victims of a large-scale breach affecting multiple French sports federations. Personal data belonging to roughly 64,512 of its licensed members was exposed.

The leak did not stem from a direct intrusion at the federation itself but from a vulnerability at a shared IT service provider responsible for managing membership/licensing portals for several French sports federations — a supply-chain compromise. A threat actor using the handle "TheFrenchGuy" exfiltrated the databases and, about two weeks later, put them up for sale on the cybercrime forum BreachForums, as part of a haul exceeding 4.5 million records across eight federations.

Exposed data categories included:

• Full names (first and last)
• Dates of birth
• Email addresses
• Postal addresses
• Telephone numbers

The compromised records expose affected members to phishing, identity theft and targeted scams. The breach was part of a wider 2025 wave of attacks on French sports federations tied to the same provider; the federation's specific remediation status is not publicly confirmed.