BreachesApr 23, 2026
‼️🇫🇷 A threat actor is selling a dataset allegedly obtained from Bodyhit Club (https://t.co/i6j...
Threat actor selling dataset of 218K Bodyhit Club customers including names, birthdates, emails, and phone numbers.
Summary
A threat actor is offering for sale a dataset allegedly stolen from Bodyhit Club, a French fitness club operator, affecting approximately 218,542 customers. The breach includes sensitive personal data such as full names, birthdates, email addresses, and phone numbers. This incident potentially violates GDPR obligations for data protection and breach notification.
Indicators of Compromise
- domain — bodyhit.fr
Entities
Unknown threat actor (data seller) (threat_actor)Bodyhit Club (product)