133,297 members affected by Lions Clubs of France data leak

On 4 January 2026, the Fondation des Lions de France (Lions Clubs of France) — the French branch of the international service-club network — saw a complete member database published for free on the BreachForums cybercrime forum, exposing 133,297 unique individuals after deduplication.

The data appears to have been exfiltrated not from the foundation directly but from MyAssoc, the third-party software platform used to manage Lions club membership records across French districts — making this effectively a supply-chain compromise. Update logs in the leaked records ran through 2 January 2026, just 48 hours before publication, meaning the information was current and immediately exploitable.

The exposed records were unusually detailed for a breach, offering a near-complete view of members' private lives rather than just email addresses and hashed passwords. Categories included:

• Full identity and civil status (name, surname, date of birth, sex, family situation, spouse names)
• Home addresses
• Phone numbers (landline, mobile and direct lines)
• Professional details and associative history
• Profile photographs

Because the Lions network counts many public officials among its members, the leak reportedly exposed mayors, prefects, magistrates, senior military officers and figures such as Rachida Dati, Sébastien Lecornu and François Bayrou, raising concrete physical- and digital-security concerns. Given the scale and sensitivity of the data, commentators expected France's data-protection regulator (CNIL) and other authorities to take up the case; no official remediation outcome had been confirmed at the time of reporting.