822,499 FNSPF members affected by data leak

On 22 January 2026, the French National Firefighters Federation (FNSPF) — the national membership association representing France's firefighters — was reported to have suffered a large-scale leak of its member database, with roughly 822,499 records exposed.

The incident is part of a broader wave of breaches in late 2025 and early 2026 in which French membership organisations — including several sports federations, real-estate agencies and large companies — were systematically scraped and exfiltrated. The stolen data was aggregated into "lookup" directories and resold on hacking forums such as BreachForums, feeding fraud, spam and identity-cross-referencing schemes.

Reporting attributes the FNSPF data, alongside dozens of other French datasets, to two cybercriminals operating under the aliases "HexDex" and "Angel Batista." The exposed FNSPF records reportedly include:

• First and last names
• Dates of birth
• Postal addresses
• Email addresses
• Phone numbers

French authorities — the Cybercrime Brigade and the Paris prosecutor's cyber division (J3) — moved against the operators, with seizure notices and reported arrests surfacing on 21 April 2026. The leaked member data, however, had already circulated on underground marketplaces, so affected firefighters remain at heightened risk of phishing and targeted fraud.