Basic-Fit Says Data Breach Exposed Personal Details of About 1 Million Members

· Original article ↗

Summary

Basic-Fit reported unauthorized access affecting about 1 million members in six European countries. The company says an investigation found personal and bank details were exfiltrated, but no passwords or ID documents were accessed.

Key points

  • Basic-Fit reported that about 1 million members in the Netherlands, Belgium, Luxembourg, France, Spain, and Germany were affected.
  • The company says an investigation with external security experts found that names, addresses, email addresses, phone numbers, birth dates, bank details, and membership information were exfiltrated.
  • Basic-Fit says monitoring detected the unauthorized access and it was stopped within minutes.
  • The company says no identification documents or account passwords were accessed.
  • Franchise customer data was not exposed because it is stored on a separate system.
  • Basic-Fit said its investigation had not found the data leaked online and that it would continue monitoring with external experts.

Article Details

Victim Organization
Basic-Fit
Incident Type
Cyberattack involving unauthorized access to a system recording club members’ visits and exfiltration of personal data
Data Types Exposed
  • Full names
  • Physical addresses
  • Email addresses
  • Phone numbers
  • Dates of birth
  • Bank account details
  • Membership information
Affected Records
Around 1 million members across the Netherlands, Belgium, Luxembourg, France, Spain, and Germany, according to a Basic-Fit spokesperson. The company's public disclosure specified 200,000 affected individuals in the Netherlands.
Operational Impact
Unauthorized access was detected by monitoring systems and stopped within minutes of discovery. The article does not report broader service disruption. Customer data held on a separate system for Basic-Fit franchises was not exposed.
Claim Status
confirmed

Countries

Industries