Thenextweb Basic-Fit Data Breach Exposes Sensitive Information of 1 Million Members
Article Content
- •Approximately 1 million members affected, including 200,000 in the Netherlands.
- •Sensitive data exposed includes bank details, names, and contact information.
- •Basic-Fit has reported the breach to authorities and is monitoring for data misuse.
Basic-Fit, Europe's largest gym chain, has confirmed a significant data breach affecting approximately 1 million members across multiple countries, with around 200,000 members in the Netherlands alone impacted. The breach involved unauthorized access to the system that records member visits, leading to the exposure of names, addresses, email addresses, phone numbers, dates of birth, and bank account details. No passwords or identity documents were accessed. The attack was detected on April 8, 2026, and was stopped shortly after its discovery. Basic-Fit has notified the Dutch Data Protection Authority and is working with cybersecurity experts to assess the situation. Affected members have been warned to monitor their accounts closely and be vigilant against phishing attempts. The company has not disclosed the identity of the attackers or the method of the breach. Currently, there is no evidence that the stolen data has been made public.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (20)
Following this threat?
Track Basic-Fit in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…