599,797 FFRS licence holders affected by data leak

On 7 January 2026, fresh reporting reconfirmed that the French Roller and Skateboard Federation (FFRS) — the national governing body for roller sports and skateboarding — had suffered a large-scale leak of its membership data affecting close to 600,000 licence holders.

The incident traces back to January 2025, when an attacker using the alias "TheFrenchGuy" exploited a vulnerability at the third-party IT provider operating Rolskanet, the platform the FFRS uses to manage its licence and membership records. The same shared provider handled licence spaces for several French sports federations, so the same intrusion compromised roughly 4.5 million records across about eight federations, with the stolen FFRS database later offered for sale on criminal forums such as BreachForums.

The exposed FFRS records included:

• Full name (last and first name)
• Email address
• Postal address
• Date and place of birth
• Telephone number

Passwords were not part of the leaked data. The federation reported the breach to the CNIL and ANSSI, filed a criminal complaint, and stated that its provider had immediately taken steps to stop the attack and harden its systems. Licence holders were advised to stay alert to fraudulent emails, SMS messages, and phone calls, and to change their Rolskanet passwords as a precaution.