Skip to content
Data breachUnknown

Leak at French Firefighters Federation

On 23 January 2026, the French Firefighters Federation suffered a data breach exposing the personal records of roughly 822,449 firefighters, including names, email addresses, phone numbers and postal addresses.

Victim
French Firefighters Federation
records
822.4K

On 23 January 2026, the French Firefighters Federation — the national body representing France's firefighters — was reported to have suffered a data breach exposing the personal records of roughly 822,449 firefighters. The leaked dataset was indexed by the French breach-tracking project bonjourlafuite.eu.org and reported alongside a broader wave of breaches hitting French federations in early 2026.

The exposed records reportedly included:

  • Full names (last name, first name)
  • Email addresses
  • Phone numbers
  • Postal addresses

No financial data or passwords were reported in the leaked set. Security coverage of the early-2026 wave attributed many of these federation breaches to ageing, shared third-party software providers used to manage large membership databases without serious security investment, though the precise intrusion path for this specific incident has not been publicly confirmed.

While the exposed fields are not in themselves highly sensitive, a member directory of this scale — names tied to email, phone and home addresses — is a strong basis for targeted phishing and social-engineering campaigns against firefighters. As of reporting, no official statement from the federation confirming the breach scope or remediation had been identified, and the status remains unknown.

Sources

  1. bonjourlafuite.eu.orghttps://bonjourlafuite.eu.org/#F%C3%A9d%C3%A9ration%20Fran%C3%A7aise%20des%20Sapeurs-Pompiers-2026-01-23
  2. itsense.frhttps://www.itsense.fr/fuites-donnees-premier-trimestre-2026/
  3. frenchbreaches.comhttps://frenchbreaches.com/

Related incidents

Data breachOngoing

Leak at La France Insoumise

In May 2026, France's La France Insoumise party had data from its Action Populaire activist platform stolen and posted on a hacking forum, exposing some 120,000 email addresses, 20,000 phone numbers, postal addresses and member activity spanning 2017-2026.

Victim
La France Insoumise