Basic-Fit data breach exposes highly sensitive user information

The Dutch fitness chain has alerted customers after a security incident compromised financial data, including bank account information.

The popular Dutch-origin gym chain Basic-Fit has informed its customers that it has suffered a significant data breach.

This writer, a user of the company, has received a communication detailing that his personal information has received an "unauthorized download."

According to the Dutch firm, on April 8th, there was unauthorized access to a system that records members' visits to the company's clubs.

Basic-Fit claims to have blocked this intrusion "within minutes of its detection," although it could not prevent personal data from being downloaded.

"We understand that this notice may be concerning and we are very sorry for any distress it may cause," they explain in their communication to members.

The incident has leaked details such as first and last names, ID numbers (not their copy), address and city, phone number, date of birth, and membership information.

The latter includes payment balance, Basic-Fit pass number, an internal identifier, the schedules and clubs of recent visits during the last week, and the description of the mobile device.

Most concerning is that financial data , such as the bank account and its holder, have also been compromised . This opens the door to unauthorized charges through direct debits or identity theft attempts.

The chain has informed the Dutch data protection authority of what happened and is working with cybersecurity experts to monitor the damage.

"At this time, to our knowledge, the affected data is not available anywhere. Together with external specialists, we are closely monitoring if they become public," they indicate.

Right now, there is no information on which threat actor could be behind it. No known ransomware group has claimed responsibility.

The firm asks users to be cautious with possible phishing emails, although it does not on the other inherent risks of cybercriminals having banking information in their possession. Additionally, it has enabled a Q&A section and will provide more information by writing to the email privacy@basic-fit.com and through its app.

Basic Fit manages centers in a dozen European countries and has over 4.8 million members on the Old Continent, according to its March earnings report. In the past year, it would have added more than 560,000 new members and expanded its network to 1,600 gyms in Europe.

The company closed 2025 with revenues of around 1,420 million euros, 17% more than the year, and an EBITDA of 348 million (+11%), also achieving positive free cash flow.

In recent years, its popularity has notably increased thanks to its television ads and its marketing strategy of giving away backpacks to new sign-ups, in addition to its popular pricing policy.

For now, it is unknown how many users have been affected by the security breach. We will continue informing.

The popular Dutch-origin gym chain Basic-Fit has informed its customers that it has suffered a significant data breach.

This writer, a user of the company, has received a communication detailing that his personal information has received an "unauthorized download."

According to the Dutch firm, on April 8th, there was unauthorized access to a system that records members' visits to the company's clubs.

Basic-Fit claims to have blocked this intrusion "within minutes of its detection," although it could not prevent personal data from being downloaded.

"We understand that this notice may be concerning and we are very sorry for any distress it may cause," they explain in their communication to members.

The incident has leaked details such as first and last names, ID numbers (not their copy), address and city, phone number, date of birth, and membership information.

The latter includes payment balance, Basic-Fit pass number, an internal identifier, the schedules and clubs of recent visits during the last week, and the description of the mobile device.

Most concerning is that financial data , such as the bank account and its holder, have also been compromised . This opens the door to unauthorized charges through direct debits or identity theft attempts.

The chain has informed the Dutch data protection authority of what happened and is working with cybersecurity experts to monitor the damage.

"At this time, to our knowledge, the affected data is not available anywhere. Together with external specialists, we are closely monitoring if they become public," they indicate.

Right now, there is no information on which threat actor could be behind it. No known ransomware group has claimed responsibility.

The firm asks users to be cautious with possible phishing emails, although it does not on the other inherent risks of cybercriminals having banking information in their possession. Additionally, it has enabled a Q&A section and will provide more information by writing to the email privacy@basic-fit.com and through its app.

Basic Fit manages centers in a dozen European countries and has over 4.8 million members on the Old Continent, according to its March earnings report. In the past year, it would have added more than 560,000 new members and expanded its network to 1,600 gyms in Europe.

The company closed 2025 with revenues of around 1,420 million euros, 17% more than the year, and an EBITDA of 348 million (+11%), also achieving positive free cash flow.

In recent years, its popularity has notably increased thanks to its television ads and its marketing strategy of giving away backpacks to new sign-ups, in addition to its popular pricing policy.

For now, it is unknown how many users have been affected by the security breach. We will continue informing.

Become a premium member for free!