Breaches and incidents
Jims (Belgium): fitness chain says member data including some IBANs copied from management system
Jims says an unauthorized third party gained access to parts of its member and customer management system and personal data was viewed and copied.
- Disclosed
- Verification
- Checked against a primary source
What happened
- Jims says an unauthorized third party gained access to parts of its member and customer management system and personal data was viewed and copied: name, contact details, date of birth, relationship data and in some cases an IBAN; no passwords or health data.
- Root cause: not disclosed; remediation included “additional security measures with its supplier.”
- No attacker named.
- Jims deactivated the access, ran a technical analysis, added access controls and monitoring, informed the GBA, and emailed all members, former members and prospects (individual notices went out on 29 September; page updated 21 Oct).