According to The Register, Basic-Fit, Europe's largest gym chain, confirmed data of around one million customers including bank details was stolen, from the system that records members' club visits [1]. Stolen data includes names, home and email addresses, phone numbers and dates of birth, passwords were not accessed, and members in the Netherlands, Belgium, France, Germany, Luxembourg and Spain were affected; according to VRT, the company said the attack was stopped within minutes [1][2]. Spanish consumer group OCU advises Basic-Fit members to watch for fraudulent calls seeking bank credentials, noting no company or bank asks for bank details by phone [3].
European gym chain Basic-Fit member-visit system breached, bank details of about one million people stolen
1 min read
- Disclosed
- Apr 13, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 1,000,000 people[1]
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Hospitality & food service
What to do nowOur advice
- Beware of calls or texts impersonating Basic-Fit or your bank to obtain bank credentials [3].
- Do not open emails or texts from unknown senders .
Timeline
Technical details
Remediation
Vendor guidance
- 1Beware of scam calls verify[3]
Never give bank details over the phone and do not open messages from unknown senders.
References
Media3
- [1]The Register2026-04-13Accessed 2026-11-11Snapshot 2026-11-11 sha256 5759d785c209
“Basic-Fit, Europe's largest gym chain, has confirmed data including the bank details of around a million customers was stolen from its systems.”
- [2]VRT NWS2026-04-13Accessed 2026-11-11
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.