Skip to content
ITDWeb Security Platform
Threat feedIncidents & VulnerabilitiesHistoryGlossarySecurity GuidesBy frameworkFree Tools
ITD
  • Threat feed
  • Threat picture
  • Incidents & Vulnerabilities
  • History
  • Glossary
  • Security Guides
  • By framework
  • Free Tools
Search
  • About ITD
  • Contact
  • Privacy Policy
  • Terms of Use
  • Disclaimer
tag

direct debit

1 article with this tag

2026-09-30

Basic-Fit Member Data Breach (Bank Details and Visit Records): 'Payment Failed' Scams and What Members Should Do

On April 13, 2026 Basic-Fit disclosed unauthorized access to the system that records members' visits to its clubs. The company says the access was stopped within minutes, but some data on active members in several countries was downloaded: membership information, name and address, email, phone number, date of birth and bank account details; no passwords were accessed. Basic-Fit told Reuters about 1 million members were affected, in six countries including the Netherlands and Spain. This site's take: gym fees involve recurring payments under the contract, and for members using SEPA direct debit (the euro-area standard for bank debits), a 'your payment failed' message mimics a real Basic-Fit process. Always check your membership status in the app, never through a link; watch for direct debits from creditors you don't recognise; and don't panic-reverse the legitimate gym fee.

← All tags
ITDWeb Security Platform

Learn from real incidents. Defend your own site.

This site is a defense-focused web security publication. We do not cover attack techniques or exploits.

Learn

  • Threat feed
  • Threat picture
  • Incidents & Vulnerabilities
  • History
  • Glossary
  • Security Guides
  • By framework
  • Free Tools
  • Tags

Legal

  • About ITD
  • Contact
  • Privacy Policy
  • Terms of Use
  • Disclaimer
  • Data sources and licences

© 2026 ITD

Operated by JIT Inc.