Breaches and incidents
Federation francaise de tir (FFTir), France: member accounts and licence-check function abused, 64,000 ID photos copied
FFTir’s notice says that in the week of 12 Oct 2026 it suffered “a new, prepared attack”.
- Disclosed
- Verification
- Checked against a primary source
What happened
- FFTir’s notice says that in the week of 12 Oct 2026 it suffered “a new, prepared attack”; the attacker copied about 64,000 ID photos and nearly 19,000 documents uploaded by members, and the complete file of 55 members. FFTir says no information on weapon ownership was affected.
- Root cause: per FFTir, the attacker logged into the EDEN member area with member accounts “whose credentials he had obtained or guessed”, and mass-queried the licence verification function of the Cibles Couleurs site.
- No attacker named; FFTir says the attacker later made a public claim with a freely accessible sample.
- The attacker’s address was blocked on 12 Oct; the Cibles Couleurs function was closed and fixed on 15 Oct; ANSSI and CNIL were notified and a complaint was filed on 16 Oct.