French Shooting Federation data breach exposes 586,000 members

A hacker known as ChimeraZ has claimed responsibility for a massive data breach involving the French Shooting Federation (FFTiR), exposing the personal information of approximately 586,854 members. The leaked 40 GB archive includes 64,000 identity photos and 19,000 medical certificates, contradicting previous assurances from the federation.

This incident follows an initial compromise in October 2025, during which the FFTiR stated that medical data and club information remained secure. However, the current leak reveals that sensitive documents, including medical certificates for the 2026-2027 season, were indeed compromised. The breach affects both 250,000 active members and roughly 350,000 former members.

The exposure of identity, address, and medical data for individuals trained in firearm handling has raised significant domestic security concerns. Previously, the French Interior Minister noted potential links between data theft and local burglaries. The breach highlights critical vulnerabilities in the federation's IT systems, specifically regarding the lack of multi-factor authentication and access control flaws.