203,179 members - claimed leak at French Ski Federation

On 27 February 2026, the French Ski Federation (Fédération Française de Ski, FFS) — the national governing body for skiing in France — was named as the victim of a data breach after a threat actor advertised a stolen member database on a cybercrime forum. The claimed dataset covered 203,179 members and spanned records from 1999 to 2026.

According to the listing and subsequent reporting, the exposed information included full civil-status details, professions, postal addresses and phone numbers, as well as sensitive family information such as parents' names. The FFS confirmed that administrative data could have been affected:

• Identity / civil-status details
• Postal addresses
• Email addresses
• Phone numbers
• Family information (e.g. parents' names)

In an official statement (early March 2026), the FFS said it had detected a cybersecurity incident affecting part of its information system and had immediately taken steps to secure the affected infrastructure. The federation stressed that licences, insurance guarantees, federal diplomas, competition results and banking data were not affected.

The FFS notified France's data protection authority (the CNIL), filed a criminal complaint, engaged cybersecurity experts for an in-depth analysis, and warned members, clubs and committees to be vigilant against phishing and suspicious requests. The incident is part of a broader 2025–2026 wave of breaches affecting French sports federations, several of which fell under CNIL scrutiny.