Leak at French Swimming Federation

On 23 December 2025, the French Swimming Federation (Fédération Française de Natation, FFN) — the national governing body for swimming in France — saw a database containing the personal data of roughly 1.3 million members offered for sale on the cybercrime forum BreachForums. The listing referenced 1,315,172 affected individuals.

The breach traces back to an intrusion during the night of 6–7 December 2025 into Extranat, the FFN's administrative management platform used by clubs, officials and licensees. After detecting the intrusion, the federation placed servers into maintenance and rolled out emergency security measures with its technical providers. The compromise was part of a wider campaign against French sports bodies, claimed by a hacker associated with the "Shiny Hunters" movement who also named the tennis and karate federations.

Exposed data categories included:

• Identity and civil-status data (last name, first name, gender, date and place of birth, nationality)
• Contact details (postal address, email address, phone number)
• Licence / membership number
• Sporting records (competition results, performances, official diplomas)

The FFN stated that no banking data was identified among the compromised elements and that the affected systems do not store medical records. The federation filed a criminal complaint, notified the CNIL and ANSSI in line with its data-protection obligations, began informing members in January 2026, and warned of an increased risk of phishing using the stolen contact details.