Fédération Française de Voile (FFVoile)
CriticalReportedNonprofits
The French Sailing Federation identified on 19 October 2026 fraudulent access to its federation databases, made possible by a vulnerability in a data consultation and analysis tool. Records of current and former licence holders (Club Licence, Sailing Passport) and affiliated structures were extracted. They include civil status (surname, first name, date of birth, sex), postal, email and phone contact details, and licence and club history. According to the sources, no passwords or medical certificates were downloaded; bank account numbers (IBAN) of some clubs are reported as affected. The federation presents this incident as separate from the one of February 2026. One source mentions more than two million records, with no confirmed count of distinct people.
This identity and contact data lets a malicious third party run targeted phishing campaigns or impersonation attempts against licence holders or clubs.
- Disclosed on
- October 23, 2026
- Incident dated
- October 19, 2026
- Sector
- Nonprofits
- Country
- France
- Cause
- Undisclosed
Exposed data
- Full name
- Identity document
- Date of birth
- Postal address
- Email address
- Phone number
- Other personal data
- Banking data (IBAN, card)
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact