Leak at French Speleology Federation

On 31 December 2024, the French Speleology Federation (Fédération Française de Spéléologie, FFS) — the national governing body for caving, with roughly 7,500 members — disclosed a data leak affecting the online portal used to subscribe to insurance for caving initiations. The portal was taken offline for several days. The incident was one of a broader wave of breaches that hit numerous French sports federations at the turn of 2024–2025.

A few days later, in early January 2025, a second incident affected the separate portal used to manage members' annual federation subscriptions. The federation's president notified members by email on 10 January, stressing that no passwords had been compromised.

Exposed data categories included:

• Last and first name
• Date of birth
• Nationality
• Email address and telephone number
• Postal address
• Licence number
• Profession and subscription details

The affected portals were taken offline while the federation investigated, and members were notified directly. No ransom demand or attacker has been publicly identified, and the volume of records actually exfiltrated was not disclosed.