Leak at French Handball Federation (via GestHand)

On 5 December 2025, the French Handball Federation (FFHandball) — the national governing body for handball in France — disclosed a security incident affecting GestHand, the federal administrative-management software used daily by roughly 2,400 clubs, committees and leagues to handle licensee records.

According to the federation and reporting by ZATAZ, attackers gained unauthorized access not through a technical vulnerability but by taking control of legitimate user login credentials. The platform centralizes the identities and contact details of the federation's base of practitioners, making it a high-value target. The breach was part of a broader wave of attacks on French sports federations in late 2025, including a near-simultaneous compromise of the French Football Federation.

The exposed personal data included:

• Last name and first name
• Gender
• Date of birth
• Email address
• Phone number

The FFHandball stated that no passwords, banking data or health information were compromised. In response, the provider neutralized the compromised access, reset all user-account passwords and reinforced security controls. The federation filed a criminal complaint, notified the data-protection authority (CNIL) and the national cybersecurity agency (ANSSI), and individually informed affected members for whom it held an email address, urging vigilance against suspicious messages. The incident is considered contained.