Basic-Fit, the largest gym and fitness chain in Europe, has reported a significant data breach that has compromised the personal information of approximately 1 million of its members. The Netherlands-based company detected unauthorized access to its systems, which was quickly blocked within minutes. However, an investigation revealed that the hacker managed to download data related to active members across multiple countries.
The breached data includes sensitive information such as names, email addresses, physical addresses, phone numbers, dates of birth, and even bank account details. Fortunately, Basic-Fit clarified that passwords and identification documents were not accessed during the breach. Basic-Fit, which boasts over 5 million members and operates 1,500 clubs across Europe, indicated that around 200,000 affected members are from the Netherlands. The remaining affected individuals are located in Spain, Germany, France, Belgium, and Luxembourg.
As of now, it remains unclear who orchestrated the cyberattack. No known ransomware group has claimed responsibility, and there is currently no evidence of the stolen data being leaked or misused. Basic-Fit is actively communicating with its members and has urged them to be vigilant against potential fraud attempts. This incident highlights the ongoing risks businesses face in protecting customer data from cyber threats.