Skip to content
Data breachUnknown

Leak at Laforêt

In March 2025, rental-application files held by French real estate network Laforêt were exposed, leaking tenants' identity documents and bank account details (RIB) along with the rest of their dossiers.

Victim
Laforêt
SectorOther

On 13 March 2025, Laforêt — one of France's largest franchised real estate networks — was reported to have leaked sensitive tenant data drawn from rental-application files (dossiers locataires). The exposure surfaced through the French breach tracker bonjourlafuite.eu.org.

The leaked material came from the documents tenants routinely submit to rent a property, which made the records especially sensitive. Reported exposed data categories include:

  • Complete rental-application files (dossiers locataires)
  • Identity documents (ID cards / passports)
  • Bank account details (RIB / IBAN)

Because these files combine identity documents with banking information, affected tenants face an elevated risk of identity theft and bank-detail fraud, including fake "change of payment details" scams that impersonate the agency. The scale of the exposure and the underlying cause were not authoritatively established, and there was no confirmed public statement from Laforêt regarding this specific incident at the time of import; its status therefore remains unknown.

Sources

  1. bonjourlafuite.eu.orghttps://bonjourlafuite.eu.org/#Lafor%C3%AAt-2025-03-13

Related incidents

Data breachContained

Leak at French Speleology Federation

On 31 December 2024 the French Speleology Federation (FFS) disclosed a data leak from its insurance-subscription portal, exposing members' identity, contact details, nationality, profession and licence numbers as part of a wider wave of attacks on French sports federations.

Victim
French Speleology Federation
Data breachUnknown

Leak at French Kick Boxing Federation

In late December 2025, the French Kick Boxing Federation (FFKMDA) had its member database leaked on BreachForums, exposing 361,321 licensees' names, dates of birth, nationalities, contact details, postal addresses and licence records across 2015-2026 seasons.

Victim
French Kick Boxing Federation
Records
361.3K
Data breachContained

Leak at French Swimming Federation

Data on roughly 1.3 million members of the French Swimming Federation (FFN) was put up for sale on BreachForums on 23 December 2025 after its Extranat management platform was breached, exposing identity details, contact information and licence numbers.

Victim
French Swimming Federation
Records
1.3M
Data breachUnknown

Leak at 123 casting

On 22 December 2025, a database of roughly 240,000 users of French casting platform 123casting was published on BreachForums, exposing identities, contact details, MD5-hashed passwords, physical measurements, ethnic origin, photo/video books, private messages and payment data.

Victim
123 casting
Records
240.0K