Hackers have gained access to customer data from both fitness chain Basic-Fit and travel platform Booking.com. At Basic-Fit, there’s a large-scale data breach affecting 1 million members internationally. Up to 200,000 Belgian customers are affected. Booking.com warns that some users’ booking details may have been viewed by unauthorised parties!
At Basic-Fit, hackers have stolen customer data from approximately 1 million members across several countries. The data includes sensitive information including names, addresses, email addresses, telephone numbers, dates of birth and bank details.
Belgian customers are also affected. In total, Basic-Fit has around 5 million members across six countries: the Netherlands, Belgium, France, Spain, Luxembourg and Germany. In the Netherlands, approximately 200,000 customers have been affected, whilst in Belgium the figure is between 150,000 and 200,000 members.
According to the company, the hack was detected quickly and stopped “within minutes”. However, data relating to around one-fifth of all customers had already been downloaded by that point. Basic-Fit emphasises that no identity documents or passwords were stolen.
Exactly when the attack took place has not been disclosed. However, the data breach was reported to the Dutch data protection authority, within 72 hours, as required by law. It is not yet clear who is behind the attack.
‘Beware of phishing’
Travel platform Booking.com has also reported a separate security incident. According to the company, unauthorised third parties may have gained access to certain user booking details.
This is said also to include names, email addresses, physical addresses and telephone numbers. In some cases, personal information shared with accommodation providers may also have been viewed.
Booking.com emphasises that the issue has now been addressed and that measures have been taken.
The platform warns of potential phishing attempts. ‘We will never ask you to share credit card details via email, telephone, text message or WhatsApp. We will never ask you to make a bank transfer that differs from the payment terms in your booking confirmation. If you receive an email that appears to have been sent by the accommodation or Booking.com, please be vigilant before clicking on any links!’