---
title: "Data breach at Fédération Française de Voile (FFVoile)"
description: "The French Sailing Federation identified on 19 October 2026 fraudulent access to its federation databases, made possible by a vulnerability in a data consultation and analysis tool. Records of current and former licence holders (Club Licence, Sailing Passport) and affiliated structures were extracte"
canonical: https://inyourgeek.com/en/fuites-de-donnees/2026-10-23-federation-francaise-de-voile-ffvoile
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2026-10-23
dateModified: 2026-10-23
---
# Fédération Française de Voile (FFVoile)

Data breach — Critical

The French Sailing Federation identified on 19 October 2026 fraudulent access to its federation databases, made possible by a vulnerability in a data consultation and analysis tool. Records of current and former licence holders (Club Licence, Sailing Passport) and affiliated structures were extracted. They include civil status (surname, first name, date of birth, sex), postal, email and phone contact details, and licence and club history. According to the sources, no passwords or medical certificates were downloaded; bank account numbers (IBAN) of some clubs are reported as affected. The federation presents this incident as separate from the one of February 2026. One source mentions more than two million records, with no confirmed count of distinct people.

This identity and contact data lets a malicious third party run targeted phishing campaigns or impersonation attempts against licence holders or clubs.

| Fact | Value |
| --- | --- |
| Disclosed on | October 23, 2026 |
| Incident dated | October 19, 2026 |
| Sector | Nonprofits |
| Country | France |
| Cause | Undisclosed |
| Severity | Critical |
| Status | Reported |

## Exposed data

- Full name
- Identity document
- Date of birth
- Postal address
- Email address
- Phone number
- Other personal data
- Banking data (IBAN, card)

## What you can do

- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- Watch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
- These documents enable identity theft, and cannot be reissued at will. Keep the notification letter: it proves where the leak came from if an account is opened in your name.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Fédération Française de Voile (FF Voile)](https://frenchbreaches.com/alertes/f-d-ration-fran-aise-de-voile-ff-voile-mvl6ymmsn9guk06lpyo) — FrenchBreaches
- [Fédération française de voile piratée : des données personnelles volées](https://frenchbreaches.com/alertes/fuite-donnees-ffvoile-mvl6ymmsn9guk06lpyo) — FrenchBreaches
- [FFVoile : plus de 2 millions de fiches exposées dans une fuite de données](https://fuitesinfos.fr/article/2026-10-23-federation-francaise-de-voile-ffvoile) — Fuites Infos

_Entry built from the cited sources after a corroboration check, then reviewed before publication._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2026-10-23-federation-francaise-de-voile-ffvoile
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees