9,599 records in a claimed data leak at Le Bambou Castillonnais (Cartedepeche.fr)

On 17 January 2026, a data-leak claim surfaced targeting Le Bambou Castillonnais — an AAPPMA (a French state-approved recreational fishing and aquatic-environment protection association) based in Castillon-la-Bataille, in the Gironde department. The claim alleges that the personal data of the association's members and other individuals held in its database was exposed, with an announced volume of roughly 9,599 records.

Le Bambou Castillonnais, like the great majority of France's local angling associations, sells and manages its fishing licences through Cartedepeche.fr, the national membership platform operated by the Fédération Nationale de la Pêche en France (FNPF). In early 2026 the FNPF disclosed that Cartedepeche.fr had suffered a cyberattack involving unauthorised access to certain personal data, and this claimed Le Bambou Castillonnais leak corresponds to that wider incident as it affects this individual association's member records.

According to the federation's notice, the data potentially exposed in the platform breach included:

• Names and first names
• Dates of birth
• Email and postal addresses
• Phone numbers
• Possibly photos and membership/licence details

The FNPF stressed that no banking data and no passwords were involved. The platform's hosting and IT provider secured the affected access points and launched technical investigations, and the federation reported the incident to France's data-protection regulator (CNIL) while warning licence holders to stay alert to phishing emails and SMS. The volume of 9,599 records is the figure asserted by the leak claim and has not been independently confirmed by the association or the FNPF.