Basic-Fit says data breach exposes details of a million members

Basic-Fit disclosed unauthorized access to member visit and account data, creating phishing and fraud exposure for affected European members.

Basic-Fit disclosed unauthorized access to a member-visit system, exposing personal and banking details for about one million members across Europe. The affected data reportedly included names, email addresses, phone numbers and bank account details.

The company said passwords were not accessed and that it does not store copies of official identity documents. Basic-Fit notified affected members and reported the incident to the Dutch data-protection authority.

The public risk is follow-on fraud rather than simple password reuse. Bank-account information, contact details and membership context can support phishing, impersonation and payment-related scams even when account credentials are not exposed.

Watch for regulator follow-up, customer notification quality, phishing campaigns using the incident, and whether large subscription platforms strengthen segmentation around visit and payment data.