Thenextweb Basic-Fit Data Breach Exposes Sensitive Information of 1 Million Members
Article Content
- •Approximately 1 million members affected, including 200,000 in the Netherlands.
- •Sensitive data exposed includes bank details, names, and contact information.
- •Basic-Fit has reported the breach to authorities and is monitoring for data misuse.
Basic-Fit, Europe's largest gym chain, has confirmed a significant data breach affecting approximately 1 million members across multiple countries, with around 200,000 members in the Netherlands alone impacted. The breach involved unauthorized access to the system that records member visits, leading to the exposure of names, addresses, email addresses, phone numbers, dates of birth, and bank account details. No passwords or identity documents were accessed. The attack was detected on April 8, 2026, and was stopped shortly after its discovery. Basic-Fit has notified the Dutch Data Protection Authority and is working with cybersecurity experts to assess the situation. Affected members have been warned to monitor their accounts closely and be vigilant against phishing attempts. The company has not disclosed the identity of the attackers or the method of the breach. Currently, there is no evidence that the stolen data has been made public.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (20)
Following this threat?
Track Basic-Fit in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…