Leak at French Sailing Federation

On 6 February 2026, the Fédération Française de Voile (FFVoile) — France's national governing body for sailing — disclosed a data breach affecting its licence-management platform, with personal data of several hundred thousand licensees potentially exposed.

According to the federation, the leak did not stem from a direct intrusion into its central infrastructure or a failure of its authentication mechanisms. Instead, an attacker fraudulently used a compromised club account to extract licensee records at scale. The federation said it blocked the account as soon as the abuse was detected.

Exposed data was limited to identity and contact details; no passwords or banking data were involved. The compromised categories include:

• Last name, first name and date of birth
• Gender
• Postal address
• Email address
• Phone number
• Disability status (and a small number of medical fitness certificates)

The FFVoile notified France's data-protection authority (CNIL), launched a thorough analysis of the incident, prepared a criminal complaint, and reinforced authentication and access controls. The federation could not confirm whether the data had circulated publicly but warned licensees of risks such as targeted phishing and identity fraud, directing inquiries to its data-protection officer (dpo@ffvoile.fr).