Breaches and incidentsBriefReported by a reputable outlet, citing the company
Basic-Fit: about 1 million gym members’ data including IBANs downloaded from a visit-tracking system
Basic-Fit confirmed unauthorized access to a system that tracks member visits, exposing membership information, names, addresses, emails, phone numbers...
- Disclosed
What happened
- Basic-Fit confirmed unauthorized access to a system that tracks member visits, exposing membership information, names, addresses, emails, phone numbers, dates of birth and bank account details (IBAN). Reports put it at about 1 million members, about 200,000 in the Netherlands; franchise clubs on a separate system were unaffected. No passwords or ID documents.
- Root cause: not disclosed; monitoring flagged and stopped the intrusion within minutes, but some data had already been downloaded.
- No attacker identified.
- Members informed; Dutch Data Protection Authority notified (per reports).
Sources
- https://www.bitdefender.com/en-us/blog/hotforsecurity/basic-fit-data-breach
- https://www.techradar.com/pro/security/basic-fit-gym-group-data-breach-exposes-details-of-over-1-million-members-heres-what-we-know
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.