Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

Basic-Fit gym group data breach exposes details of over 1 million members — here's what we know

A gym athlete lifting a kettle bell off the floor, bathed in purple light.
  • Basic‑Fit confirms breach affecting around 1 million customers across six countries
  • Stolen data includes names, contact details, DOB, and bank info
  • No passwords or IDs exposed, but phishing risk expected

Basic-Fit, one of the biggest gym chains in Europe, has confirmed losing sensitive data on approximately a million of its customers.

The company confirmed the news in a data breach notification email sent to affected individuals, as well as in a press release and statements given to the media.

“Today, Basic-Fit has notified the relevant data protection authority concerning unauthorized access to the system that records members’ visits to Basic-Fit clubs,” the press release reads. “The unauthorized access was detected by our system monitoring processes and was stopped within minutes of discovery."

Passwords are safe

While the announcement did not say how many people were involved, a spokesperson told The Register the affected customers live in all six countries where Basic-Fit operates: The Netherlands, Belgium, Luxembourg, France, Spain, and Germany.

“In total around 1 million members were involved," they told the publication. Of that number, around 200,000 are located in The Netherlands, apparently.

So far, no threat actors claimed responsibility for the attack. They stole people’s names, postal addresses, email addresses, phone numbers, dates of birth, and bank account details.

We don’t know what they mean by “bank account details”. Usually, companies only store the last four digits of a person’s credit card number on their server - full payment data is generally stored elsewhere.

“Basic-Fit does not hold identification documents of members and no passwords were accessed,” it concluded. So far, there is no evidence of the data being misused, but it’s safe to expect phishing emails being sent out in the coming weeks.

The company running Basic-Fit also owns Clever Fit, a German gym chain. Combined, the two have around 5.8 million registered members, according to The Register, and operate more than 2,150 budget-friendly gyms in 12 countries across Europe.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.