A threat actor is claiming to have breached Fitness Factory Health Club, alleging unauthorized access to the company’s member management platform and offering what is described as a downloadable dataset containing customer information.
The claim, published on June 25, includes a screenshot allegedly showing an internal employee portal used by the company’s Yonkers, New York location. The post also references an alleged download containing stolen data, although the authenticity of the claims has not been independently verified.
Portal screenshot shared as alleged proof
The evidence posted by the threat actor appears to show an employee scheduling and client management interface displaying member profiles, contact information, membership status, appointment history, and profile photographs.
The actor also published alleged credentials and links to both the employee portal and an external download location. BreachNews is not publishing or linking to that information due to the sensitive nature of the material.
Based on the screenshot, the alleged exposure could include personally identifiable information associated with gym members and internal scheduling records. However, the full scope of any compromised data remains unknown.
Downloadable dataset also claimed
In addition to the portal screenshot, the threat actor claims to possess a downloadable archive containing data from the organization. No database schema, record count, or technical details were provided beyond the screenshot and accompanying claims, making it impossible to independently verify the size or contents of the alleged dataset.
The claim follows another recent fitness sector incident covered by BreachNews involving George Brown Sports Clubs, highlighting continued targeting of organizations that store customer membership and personal information.
Investigation ongoing
At the time of publication, Fitness Factory Health Club had not issued any public statement regarding the alleged breach.
BreachNews will update this article if the organization confirms the incident or additional evidence becomes available.
