Leak at French Shooting Federation (via ITAC)

On 23 October 2025, the French Shooting Federation (Fédération Française de Tir, FFTir) — the national governing body for sport shooting in France — disclosed that it had suffered a major data breach affecting its licensees. The federation detected an unauthorized intrusion into its ITAC membership information system on 20 October; investigators established that the attacker had access between 18 and 20 October 2025.

The breach exposed the personal data of the federation's licensees, with reporting indicating that up to around 274,000 active and non-active members were potentially affected. The federation confirmed that no medical data, banking information, weapons-ownership records, or firearms-authorization data were involved.

Exposed data categories included:

• Licence number
• Civil status (name, date and place of birth)
• Postal address
• Email address
• Telephone number

On discovering the intrusion, the FFTir disconnected its ITAC and EDEN servers, notified the authorities — including ANSSI and the CNIL — filed a criminal complaint, and engaged external experts to audit its infrastructure. The federation declared the incident closed, restored its systems with reinforced security, required members to reset passwords, and rolled out two-factor authentication on ITAC. Because the leaked data identified firearms licence-holders, French prefectures issued vigilance warnings over the risk of targeted burglaries and weapon theft; an 18-year-old suspect was later detained in connection with the hack.