Several French Sports Bodies Have Reported Repeated Cyberattacks
Several French sports bodies, including the shooting federation, have reported cyberattacks, and one earlier breach reportedly led to firearm thefts.
Event / Security
French Shooting Federation Cyberattack
On 22 October 2026, the Fédération Française de Tir announced a cyberattack in which an attacker used licensee credentials to access its EDEN licensee area in the week of 12 October 2026. The attacker retrieved licensee names, clubs, age categories and grades, about 64,000 identity photos, nearly 19,000 documents, and complete files for 55 licensees. The federation states that firearm possession data, passwords and banking data were not affected. The attack was blocked on the evening of 12 October, and a complaint was filed. The federation had also been breached in October 2025, when data on members and former licensees was taken. Other French sports bodies have reported cyberattacks.
1 reported locations
Daily activity
2 articles0 articles
2026-10-22 to 2026-10-26 · UTC publication dates
Coverage begins 22 Oct, 19:55 UTC
Follow the documented timeline or explore the related reporting.
What happened
French handball, basketball, rugby, athletics and table tennis federations were previously targeted by cyberattacks
Prior to the Fédération Française de Tir attack, the French federations for handball, basketball, rugby, athletics and table tennis were targeted by cyberattacks.
Firearm possession information, passwords and banking data were not affected in the 2026 attack
The federation stated that no information on firearm possession was affected, as the federation does not hold such information. Passwords were not affected, and the federation's tools contain no banking data.
Stade français rugby club was targeted by a cyberattack in August 2026
The Stade français rugby club was targeted by a cyberattack in August 2026.
Fédération Française de Tir suffers a new cyberattack in the week of 12 October 2026
In the week of 12 October 2026, the Fédération Française de Tir was subjected to a prepared cyberattack. The attacker logged into the EDEN licensee area using licensee account credentials that had been obtained or guessed.
Complete licensee files were copied for 55 licensees who are being contacted individually
For 55 licensees, the complete file was copied. The federation is contacting these licensees individually.
Attacker accessed names, clubs, age categories and handicap-sport mentions of licensees
For most current and former licensees, the accessed data consisted of first name, last name, club, age category and, where applicable, the Cibles Couleurs grade with its validation date and a mention of handisport practice.
Fédération Française de Tir files a complaint over the October 2026 cyberattack
The Fédération Française de Tir filed a complaint following the cyberattack on its licensee area.
Attacker retrieved about 64,000 identity photos and about 19,000 licensee documents
The attacker retrieved approximately 64,000 identity photos and nearly 19,000 documents uploaded by licensees to their accounts, including certificates of aptitude for sport shooting practice.
Fédération Française de Tir was previously breached in October 2025
In October 2025, the Fédération Française de Tir was breached. Personal data of 250,000 members and 750,000 former licensees was taken.
Attacker's access address blocked on the evening of 12 October 2026
The attacker's address was blocked on the evening of 12 October 2026. The federation's hosting provider alerted the federation the following morning.
Data from the 2025 breach was used to steal firearms in France
Some personal data taken in the October 2025 breach of the Fédération Française de Tir was used to steal firearms in France, through burglaries and through impersonation, such as posing as a police officer.
Read the coverage
2 alternative perspectives
Attacker Accessed Licensee Names, Photos and Documents in October Attack
An attacker accessed licensee identity photos, documents and personal details, while passwords and banking data were not affected.