{"id":"basic-fit-member-data-breach-apr-2026","category":"breach","status":"closed","title":"Basic-Fit breach steals one million gym members’ personal and bank account details","tldr":"Attackers stole personal and bank account details of about one million Basic-Fit members across six European countries. Basic-Fit blocked access and notified members. Watch for convincing fake messages and unfamiliar bank transactions.","summary":"Attackers downloaded information about approximately one million active Basic-Fit members in the Netherlands, Belgium, Luxembourg, France, Spain and Germany. The stolen records included membership information, names, addresses, email addresses, telephone numbers, dates of birth and bank account details. Basic-Fit said it blocked access within minutes of detection and had informed affected members and the relevant data protection authority by 13 April. It said no passwords were accessed and it does not hold members’ identification documents. Reuters reported that franchise operations using a separate system were unaffected. At disclosure, Basic-Fit had found no evidence of publication or misuse and was monitoring with external specialists. The search through 3 November found no later public resolution; recovery or deletion of the stolen copies remains unconfirmed. This is a service breach, with no device update for members to install.","action":"If Basic-Fit notified you, watch for messages or calls using your membership details to gain your trust; check requests through the Basic-Fit app before sharing sensitive information. Monitor your bank account and report unfamiliar transactions to your bank promptly. There is no device update to install for this breach.","product":"Basic-Fit gym membership service","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["basic-fit","data-breach","personal-data","banking-data","phishing"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Basic-Fit informs members on an unauthorised data access","url":"https://corporate.basic-fit.com/docs/Basic-Fit%20informs%20members%20of%20an%20unauthorised%20data%20access?q=3W97qQx2g4cDXrju5NrDeZ","by":"Basic-Fit","date":"2026-04-13"},{"kind":"news","title":"Europe’s Largest Gym Chain Says Data Breach Impacts 1 Million Members","url":"https://www.securityweek.com/europes-largest-gym-chain-says-data-breach-impacts-1-million-members/amp/","by":"SecurityWeek","date":"2026-04-14"},{"kind":"news","title":"Basic-Fit data breach exposes details of a million gym members","url":"https://www.marketscreener.com/news/basic-fit-reports-unauthorized-access-to-members-data-including-bank-account-details-ce7e50d9d180f125","by":"Reuters","date":"2026-04-13"},{"kind":"news","title":"Basic-Fit alerta de un ‘hackeo’ a su sistema que afecta a los datos personales y bancarios de sus clientes","url":"https://elpais.com/economia/2026-04-13/basic-fit-alerta-de-un-hackeo-a-su-sistema-que-afecta-a-datos-personales-y-bancarios-de-sus-clientes.html","by":"El País","date":"2026-04-13"}],"started":"2026-04-08","closed":"2026-04-14","created":"2026-11-03T21:08:14.795Z","updated":"2026-11-03T21:08:14.795Z","cve_notes":[],"timeline":[{"at":"2026-04-14","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Basic-Fit confirmed to SecurityWeek that approximately one million members were affected across the Netherlands, Belgium, Luxembourg, France, Spain and Germany, including around 200,000 in the Netherlands. The company said it was unaware of the stolen data being published or misused.","url":"https://www.securityweek.com/europes-largest-gym-chain-says-data-breach-impacts-1-million-members/amp/","by":"SecurityWeek","patch":null},{"at":"2026-04-13","added":"2026-11-03T20:51:54.186Z","kind":"disclosed","text":"Basic-Fit disclosed that intruders had downloaded members’ personal and bank account details. It said access was stopped within minutes of detection, affected members had been informed and the relevant data protection authority had been notified.","url":"https://corporate.basic-fit.com/docs/Basic-Fit%20informs%20members%20of%20an%20unauthorised%20data%20access?q=3W97qQx2g4cDXrju5NrDeZ","by":"Basic-Fit","patch":null},{"at":"2026-04-08","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Unauthorised access occurred in Basic-Fit’s system for recording members’ gym visits, according to the company’s account reported by El País.","url":"https://elpais.com/economia/2026-04-13/basic-fit-alerta-de-un-hackeo-a-su-sistema-que-afecta-a-datos-personales-y-bancarios-de-sus-clientes.html","by":"El País","patch":"na"}],"url":"https://hard.fyi/live/basic-fit-member-data-breach-apr-2026/","json":"https://hard.fyi/api/live?id=basic-fit-member-data-breach-apr-2026"}