Overview
- The FFR says the incident stemmed from a phishing campaign aimed at certain licensed members, not a breach of its own systems.
- Containment steps included temporarily suspending some services, tightening access controls, forcing password resets, and deploying additional security tools.
- Members and partners are urged to treat unusual emails, calls, or texts with caution and to never share passwords, IDs, licence numbers, or personal data by email or phone.
- Investigations are underway to determine how many members were affected and what types of information, if any, may have been exposed.
- The federation plans to file a complaint and notify CNIL and state services, recalling a previous cyber incident reported in 2023.