---
title: "Data breach at Fédération française de tir (FFTir)"
description: "On 17 October 2026, a data seller claimed on a cybercrime forum to have obtained data from the French Shooting Federation (FFTir). The listing mentions 586,854 member records (licence numbers, names, sports categories, clubs), about 140,000 postal addresses, 64,000 ID photos and 19,000 documents, mo"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-17-federation-francaise-de-tir-fftir
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-17
dateModified: 2026-10-17
---
# Fédération française de tir (FFTir)

Data breach — Critical

On 17 October 2026, a data seller claimed on a cybercrime forum to have obtained data from the French Shooting Federation (FFTir). The listing mentions 586,854 member records (licence numbers, names, sports categories, clubs), about 140,000 postal addresses, 64,000 ID photos and 19,000 documents, mostly medical certificates. It also cites 56 detailed records (dates and places of birth, e-mail addresses, phone numbers), over 400,000 first-login records and 1,659 club records. These figures come from the listing, overlap with one another, and have not been independently verified. This claim is separate from the 2025 intrusion into the federation's licence management system.

If authentic, ID photos, addresses and medical certificates would let a malicious third party attempt identity impersonation or targeted scams.

| Fact | Value |
| --- | --- |
| Disclosed on | October 17, 2026 |
| Accounts affected | 586,854 |
| Sector | Nonprofits |
| Country | France |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Reported |

## Exposed data

- Full name
- Customer ID
- Postal address
- Date of birth
- Phone number
- Email address
- Identity document
- Health data
- Connection data (IP, logs)

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- Health data is “special category” data under the GDPR: a leak opens a right to compensation, and the organisation must notify the DPA within 72 hours.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Fédération Française de Tir (FFTIR)](https://frenchbreaches.com/alertes/f-d-ration-fran-aise-de-tir-fftir-mvaxif0cry9qfg3y9t) — FrenchBreaches
- [Fédération Française de Tir : fuite revendiquée visant 586 854 personnes](https://fuitesinfos.fr/article/2026-10-17-federation-francaise-de-tir-fftir) — Fuites Infos
- [FFTir : 40 Go de données revendiqués, 586 854 personnes et des certificats médicaux dans les fichiers](https://www.cyberattaque.org/fftir-40-go-de-donnees-revendiques-586-854-personnes-et-des-certificats-medicaux-dans-les-fichiers/) — Cyberattaque.org
- [Violation de données personnelles de la Fédération Française de Tir : situation, risques et recommandations](https://www.cybermalveillance.gouv.fr/tous-nos-contenus/actualites/violation-de-donnees-personnelles-fftir-202511) — Cybermalveillance.gouv.fr (incident de 2025)

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-17-federation-francaise-de-tir-fftir
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees