Fitnessity Data Breach: Over 5,000 Users' Data Exposed

Over 5,000 users' personal and payment information exposed in a recent data breach. Change your passwords and monitor your accounts for suspicious activity. #DataBreach #CyberSecurity #Privacy

Sam Bent

Aug 25, 2024 - 1 min read

Fitnessity is a multi-sports and wellness platform that enables users to search and book various active lifestyle activities. As a popular service, it supports a large community of fitness enthusiasts and professionals alike.

📅 Breach Details

Date of Breach: November 20, 2023
Discovered by: IntelBroker, a known BreachForums operative
Type of Data Compromised: Personal Identifiable Information (PII)
Number of Affected Users: 5,033

🕵️‍♂️ Threat Actor Profile

IntelBroker is a well-known figure within the cybercriminal community, particularly on forums like BreachForums. They specialize in leaking and distributing sensitive data obtained from various breaches. Their activity is notorious, often leading to significant harm to individuals and organizations.

🔍 Impact Analysis

The compromised data includes:

Personal Information: Full names, usernames, gender, birthdates, emails, and phone numbers.
Location Details: Addresses, cities, states, and postal codes.
Account Data: User IDs, account statuses, creation dates, and activity logs.
Sensitive Information: Emergency contact details, profile pictures, Stripe customer IDs, and possibly payment information linked to Stripe.

The leak of such comprehensive data poses significant risks, including identity theft, financial fraud, phishing attacks, and targeted social engineering.