Fédération francophone de Gymnastique (FFG)
HighReportedNonprofits
An attacker using the alias Venus1337 claimed on September 13, 2026, on a cybercriminal forum, to have breached the systems of the Fédération francophone de Gymnastique in Belgium, offering for sale datasets covering 209,818 members, 764 user accounts with hashed passwords, 5,858 accident files, 26,058 invoices and 10,335 affiliations. Samples reviewed by researchers show license numbers, names, gender, dates of birth, postal addresses, phone numbers and email addresses of members, along with billing and club-linked accident records. The attacker also claims to hold access to the federation's admin panel, which could not be independently verified.
The combination of identity, contact details and club affiliation facilitates targeted phishing and identity theft, with heightened sensitivity for minors whose home address and sports venue would be linked together.
- Disclosed on
- September 13, 2026
- Accounts affected
- 209,818
- Sector
- Nonprofits
- Country
- Belgium
- Cause
- Undisclosed
Exposed data
- Email address
- Full name
- Phone number
- Postal address
- Date of birth
- Customer ID
- Password (hashed)
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact