Menu

  • Alerts
  • Incidents
  • News
  • APTs
  • Cyber Decoded
  • Cyber Hygiene
  • Cyber Review
  • Cyber Tips
  • Definitions
  • Malware
  • Threat Actors
  • Tutorials

Useful Tools

  • Password generator
  • Report an incident
  • Report to authorities
No Result
View All Result
CTF Hack Havoc
CyberMaterial
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
    • Report an incident
  • About
    • About Us
    • Advertise with us
Get Help
Hall of Hacks
  • Education
    • Cyber Decoded
    • Definitions
  • Information
    • Alerts
    • Incidents
    • News
  • Insights
    • Cyber Hygiene
    • Cyber Review
    • Tips
    • Tutorials
  • Support
    • Contact Us
    • Report an incident
  • About
    • About Us
    • Advertise with us
Get Help
No Result
View All Result
Hall of Hacks
CyberMaterial
No Result
View All Result
Home Incidents

UK Health Club Exposes 500k Member Images

June 20, 2024
Reading Time: 3 mins read
in Incidents
UK Health Club Exposes 500k Member Images

A significant data breach at Total Fitness, a UK-based health club chain, has compromised nearly 475,000 personal images and private data from a non-password-protected membership database. The leak, identified by Jeremiah Fowler at vpnMentor, includes profile pictures, personal screenshots, and sensitive documents such as passports, credit cards, and utility bills. Some images, including close-ups used for gym profiles, even contained personal photos of members and their children. The breach also exposed an image linked to a member’s OnlyFans page, heightening the risk of phishing and extortion.

Total Fitness, established in 1993 and operating 15 health clubs across Northern England and Wales, along with two fitness apps, has over 100,000 members and 600 employees. The researcher’s use of open-source reverse image search tools allowed easy identification of members, raising serious privacy concerns. The database was closed a week after the leak was reported, but the duration it remained unsecured is unclear, leaving questions about prior unauthorized access. Additionally, it is not confirmed whether health-related data was also exposed or if the leak affected former members.

In response to the leak, Total Fitness assured members that images have been removed and the Information Commissioner’s Office (ICO) has been notified. The company explained that member photos are collected to prevent membership fraud and assist in identifying members at their facilities. Total Fitness is communicating directly with affected members to address the issue. The data breach’s origins, whether from apps or the website, remain undetermined, as Total Fitness’s app functionality includes membership management, payments, and access to digital workouts.

The Total Fitness incident follows earlier reports, such as the exposure of 151 million MyFitnessPal app users in January and findings on health and fitness apps sharing user data with third parties. Cybernews has reached out to Total Fitness for further comment, awaiting their detailed response. This breach underscores ongoing vulnerabilities in fitness and health-related data security, prompting further scrutiny and necessary precautions in data handling and protection practices across the industry.

Reference:
  • Data Breach Exposes Images of Nearly 500k Members of UK Health Club Chain
Tags: credit cardscyber incidentsCyber Incidents 2024Cyber threatsData Breachhealth club chainJune 2024OnlyFanspassportsTotal FitnessUK
ADVERTISEMENT

Related Posts

French Chip Firm Semco Hacked During IPO

Louis Vuitton Korea Hit By Cyberattack

July 8, 2025
French Chip Firm Semco Hacked During IPO

French Chip Firm Semco Hacked During IPO

July 8, 2025
French Chip Firm Semco Hacked During IPO

Virginia School District Hit By Cyberattack

July 8, 2025
Ransomware Attack Causes Outage at Ingram

Ransomware Attack Causes Outage at Ingram

July 7, 2025
Ransomware Attack Causes Outage at Ingram

Call of Duty Players Hacked on Game Pass

July 7, 2025
Ransomware Attack Causes Outage at Ingram

RansomHub Claims Theft of Coppell City Data

July 7, 2025

Latest Alerts

New Ransomware BERT Targets ESXi Systems

NordDragonScan Malware Steals Windows Data

AMOS Mac Stealer Adds Persistent Backdoor

APT36 Targets Indian Defense Linux Systems

hpingbot Botnet Uses Pastebin C2 Channel

Hackers Abuse Driver Signing For Malware

Subscribe to our newsletter

    Latest Incidents

    French Chip Firm Semco Hacked During IPO

    Louis Vuitton Korea Hit By Cyberattack

    Virginia School District Hit By Cyberattack

    Ransomware Attack Causes Outage at Ingram

    Call of Duty Players Hacked on Game Pass

    RansomHub Claims Theft of Coppell City Data

    CyberMaterial Logo
    • About Us
    • Contact Us
    • Jobs
    • Legal and Privacy Policy
    • Site Map

    © 2025 | CyberMaterial | All rights reserved

    Welcome Back!

    Login to your account below

    Forgotten Password?

    Retrieve your password

    Please enter your username or email address to reset your password.

    Log In

    Add New Playlist

    No Result
    View All Result
    • Alerts
    • Incidents
    • News
    • Cyber Decoded
    • Cyber Hygiene
    • Cyber Review
    • Definitions
    • Malware
    • Cyber Tips
    • Tutorials
    • Advanced Persistent Threats
    • Threat Actors
    • Report an incident
    • Password Generator
    • About Us
    • Contact Us
    • Advertise with us

    Copyright © 2025 CyberMaterial