The numbers
Timeline
🏛️Not members — treasurers
This case doesn't concern the millions of French people who belong to some association — it specifically concerns the leaders and treasurers who at some point submitted a subsidy request through Le Compte Asso. A narrower population, but with direct financial risk: it's the association's own bank account that's exposed, not just an individual's.
What it changes for you
If you manage an association that used Le Compte Asso, the main risk is a fraudulent SEPA direct debit on the organization's account — watch for unrecognized transactions in the weeks following a notification. The second risk is a call posing as "the ministry" or "tax authority" to "verify your bank details" — exactly the mechanism documented in From Leak to Scam.
Frequently asked questions
Is the Compte Asso breach confirmed?
Yes, by the Sports Ministry itself, which notified the CNIL and filed a complaint. The exact volume (227,000 to 270,000) remains the hacker's claim.
Who's affected: associations or their members?
Association leaders who used Le Compte Asso for a subsidy request — not the association's own members or users.
What's the risk for an affected association?
A fraudulent SEPA direct debit on the association's account, or a call impersonating a public service asking to confirm bank details.
Related reading
Egidio — The Threat Laboratory, "Compte Asso: France's sports ministry confirms, treasurers exposed," egidio.app/en/laboratoire/compte-asso-france-iban-breach/. Licensed CC BY 4.0.
Free to reuse, including commercially, with attribution. Reuse terms.