Leak at French Roller Skateboard Federation

On 14 January 2025, the Fédération Française de Roller et Skateboard (FFRS) — the national governing body for roller sports and skateboarding in France — disclosed that the personal data of its members had been stolen in a cyberattack affecting roughly 577,000 licence holders.

The breach did not originate inside the federation itself. It stemmed from a vulnerability at a third-party IT provider that managed the online licence and administrative portals shared by several French sports federations. A threat actor using the alias "TheFrenchGuy" exploited that shared platform, exfiltrating member records that were later offered for sale on a hacking forum as part of a wider campaign affecting around eight federations and some 4.5 million records in total.

The exposed data included:

• First and last names
• Dates and places of birth
• Email and postal addresses
• Phone numbers
• Licence numbers

The FFRS reported the incident to France's data protection authority (CNIL), filed a criminal complaint, and notified affected members and clubs by email and through its platform. No banking data or passwords were reported as compromised, but the leaked identity and contact details create a lasting risk of phishing and identity-fraud attempts against members.