> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Fédération Française de Spéléologie Dataset Claim Covers 93,493 Members
- URL: https://darkwebinformer.com/federation-francaise-de-speleologie-dataset-claim-covers-93-493-members/
- Published: 2026-09-21T16:04:23.000Z
- Updated: 2026-09-21T16:04:23.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report France Member, Banking & Source Code 93,493 Members 

## Fédération Française de Spéléologie Dataset Claim Covers 93,493 Members

A forum actor posting as **RedStone** is offering what they claim is the **full database** of the **Fédération Française de Spéléologie (FFS)**, France's national caving federation. The listing states that the material contains **93,493 unique member records**, including **31,801 email addresses** and **33,471 phone numbers**. The actor also claims the dump includes **371 validated IBANs**, payment and insurance-subscription data, club and license accounts, a full **mysql.user** table containing a root hash and 28 users, and the complete source code for a custom PHP portal and payment application. The post further claims **full server RCE**, compromise of **28 databases**, a **322 MB** dump, and defacement of seven subdomains. A 1,000-record sample is advertised. The claim is **unverified**.

Severity CRITICAL 

Sponsored

[ ![WhiteIntel, dark web exposure monitoring](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/08/whiteintel_io_banner.jpg) ](https://whiteintel.io/?utm%5Fsource=darkwebinformer.com&utm%5Fmedium=referral&utm%5Fcampaign=whiteintel) 

Members93,493

Emails31,801

Phone numbers33,471

Validated IBANs371

### ▣Post details

TargetFédération Française de Spéléologie

CountryFrance

SectorSports federation / membership organization

ListingFull database for sale

Databases28

Dump size322 MB

ObservedSep 20, 2026

ActorRedStone

### !What the post claims

- 93,493 unique member records
- 31,801 email addresses
- 33,471 phone numbers
- Full names
- Home addresses
- Dates of birth
- License numbers
- 371 validated IBANs
- Banking information
- Payment and direct-debit data
- Insurance subscriptions
- Club accounts
- License accounts
- 28 databases
- 322 MB full dump
- Full mysql.user table
- Root password hash
- 28 MySQL users
- Complete custom PHP portal source code
- Payment-application source code
- Full server RCE claimed
- Seven subdomains allegedly defaced
- 1,000-record sample advertised
- Price listed as make an offer

### ◱Screenshot

[ ![Forum post claiming a breach of the Fédération Française de Spéléologie involving member, banking, database and source-code data, September 2026](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/09/24309875293087527863598723598762395876987623.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/09/24309875293087527863598723598762395876987623.png) 

Forum post claiming the sale of Fédération Française de Spéléologie member, banking, database and source-code data, observed 20 September 2026.

### ☷Mapped techniques

The post does not explain how the initial compromise occurred. The techniques below are mapped only to capabilities and actions explicitly claimed in the listing.

- Collection [T1213](https://attack.mitre.org/techniques/T1213/) Data from Information Repositories Claimed The actor claims access to 28 databases containing member, banking, payment, insurance and account records.
- Impact [T1491.002](https://attack.mitre.org/techniques/T1491/002/) External Defacement Claimed The listing states that seven FFS-related subdomains were defaced and provides archived references as proof.

### ⚠Potential impact

If authentic, the combination of **member identities, dates of birth, addresses, phone numbers, email addresses, license information and banking data** could expose affected individuals to identity theft, targeted phishing, payment fraud and direct-debit abuse. The claimed **IBAN data, payment records and insurance information** increase the financial sensitivity of the incident. Exposure of the **mysql.user table, root hash and application source code** could also support follow-on attacks against federation systems if any credentials, secrets or vulnerabilities remain reusable. The claimed RCE and defacement activity would indicate that the incident extended beyond passive data theft if verified.

### iStatus Unverified

The forum listing provides specific member, email, phone, IBAN, database and file-size counts, along with claims of server-level access, source-code theft and multiple defacements. However, the post does **not identify the initial intrusion method** or independently demonstrate that the advertised archive is complete and current. Dark Web Informer has **not independently verified the 93,493-member dataset, the 371 IBANs, the claimed RCE, the MySQL credential material, the source-code archive or the seven defacement claims**.

Want everything on this breach? **Paid subscribers** get the full unredacted claim details and more. After subscribing, check out the [threat feed](https://darkwebinformer.com/threat-feed/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=federation-francaise-speleologie-2026-09-20&utm%5Fcontent=threat-feed) and search there for this alert.

[View pricing →](https://darkwebinformer.com/pricing?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=federation-francaise-speleologie-2026-09-20&utm%5Fcontent=pricing-button) 

[Dark Web Informer](https://darkwebinformer.com/?utm%5Fsource=alert&utm%5Fmedium=card&utm%5Fcampaign=federation-francaise-speleologie-2026-09-20&utm%5Fcontent=footer) // Threat Intelligence