Breaches · 154 days ago
Basic-Fit’s centralized member-visit system was breached, exposing personal details and bank information of about one million gym members across six European countries. The breach was detected and stopped within minutes, but attackers accessed names, addresses, dates of birth, phone numbers, email addresses, and bank details. Passwords were not accessed, which limits immediate account takeover risks but does not prevent fraud.
The affected countries include the Netherlands, Belgium, France, Germany, Luxembourg, and Spain, with approximately 200,000 members impacted in the Netherlands alone. Basic-Fit confirmed the breach after pressure from media and notified affected members and data protection authorities. The attackers exploited a single system that holds membership data for all these countries, making it a high-value target with a broad blast radius.
Access to bank details combined with personal membership information enables highly targeted phishing and financial fraud campaigns that leverage genuine membership context. This breach shows how centralized data systems can become a single point of failure across multiple countries, increasing the risk and scale of exposure even when passwords remain secure.
5 sources covering this story
Basic-Fit hack compromises data of up to 1 million members - Help Net Security
Basic-Fit disclosed a data breach affecting up to 1 million members in Europe, including 200,000 in the Netherlands.
Europe’s Largest Gym Chain Says Data Breach Impacts 1 Million Members
Basic-Fit has reported that hackers have stolen names, dates of birth, and even bank account details.
European Gym giant Basic-Fit data breach affects 1 million members
Dutch fitness giant Basic-Fit announced that hackers breached its systems and gained access to information belonging to a million of its customers.
Gym giant Basic-Fit breached with at least 1M affected
: Names, addresses, dates of birth, and bank details accessed, though not passwords
The Record from Recorded Future
Hack at Dutch gym chain Basic-Fit exposes customer data in several EU countries
Unknown hackers breached the systems of European gym chain Basic-Fit and downloaded personal data belonging to members across several countries, the company has announced.
Part of the PlainSec briefing for 2026-04-14