Basic-Fit Confirms Data Breach Affecting 1 Million Members Across Europe
AI-generated from multiple sources. Verify before acting on this reporting.
AMSTERDAM — Dutch fitness chain Basic-Fit confirmed Monday that hackers breached its computer systems and exfiltrated personal data belonging to approximately 1 million members across 12 European countries.
The breach, which was detected on April 13, 2026, compromised sensitive information including names, email addresses, and membership details. The company stated that the incident affected customers in the Netherlands, Belgium, Luxembourg, France, Spain, and Germany, among other nations where it operates.
Basic-Fit, which operates over 1,000 gyms across Europe, said it immediately engaged cybersecurity experts to investigate the scope of the intrusion and secure its networks. The company has notified relevant data protection authorities in each affected jurisdiction and is working to assess the full extent of the damage.
In a statement released Monday, Basic-Fit apologized to its members for the incident and pledged to take all necessary steps to prevent future breaches. The company did not specify what motivated the attackers or how long the systems remained compromised.
The breach comes amid a surge in cyberattacks targeting European businesses in early 2026. Security analysts have noted an increase in ransomware campaigns and data exfiltration attempts against service providers and retail chains.
Basic-Fit has set up a dedicated helpline for affected members to answer questions about the breach and provide guidance on protecting personal information. The company is also offering free credit monitoring services to those whose data was compromised.
Regulators in several countries have launched preliminary inquiries into the incident. The Dutch Data Protection Authority said it is reviewing Basic-Fit's response to ensure compliance with the General Data Protection Regulation (GDPR).
The company has not yet determined whether any financial data was accessed during the breach. Basic-Fit stated that payment card information is stored separately and was not part of the compromised database.
Cybersecurity experts have warned that stolen personal data can be used for identity theft, phishing campaigns, and other fraudulent activities. Members are advised to monitor their accounts for suspicious activity and change their passwords immediately.
As of Monday evening, Basic-Fit had not identified the group responsible for the attack. Investigators are working to trace the origin of the breach and determine whether the stolen data has been sold on dark web marketplaces.
The incident marks one of the largest data breaches to affect a European fitness chain in recent years. Basic-Fit's stock price fell 3% in early trading on the Euronext Amsterdam following the announcement.
Company officials have promised to keep members updated as more information becomes available. The investigation is ongoing, and no arrests have been made in connection with the breach.