Hackers gained access to customer data from both Basic-Fit and Booking.com

Hackers have gained access to customer data from both the fitness chain Basic-Fit and the travel platform Booking.com. At Basic-Fit, this involves a large-scale data breach affecting about one million members, including in Belgium. Booking.com warns that some users’ booking details may have been viewed.

At Basic-Fit, hackers have stolen customer data from approximately one million members from different countries. The Dutch fitness chain announced this itself. The data includes sensitive information such as names, addresses, email addresses, telephone numbers, dates of birth and bank details.

Belgian customers have also been affected, although it is not clear how many. In total, Basic-Fit has under its own brand around 5 million members across six countries: the Netherlands, Belgium, France, Spain, Luxembourg and Germany. In the Netherlands, approximately 200,000 customers have been affected.

According to the company, the hack was detected quickly and stopped “within minutes”. However, data from around one-fifth of customers had already been downloaded by that point. Basic-Fit emphasises that no identity documents or passwords were stolen. It is not yet clear who is behind the attack.

Booking.com has also reported a security incident. According to the company, unauthorised third parties may have gained access to certain user booking details. This is said to include names, email addresses, physical addresses and telephone numbers. In some cases, personal information shared with accommodation providers may also have been accessed.

Booking.com emphasises that the issue has now been resolved and that measures have been taken. “To keep your booking secure, we have updated the PIN for your reservation,” reads an email to customers.

At the same time, the platform is warning of potential phishing attempts. “We will never ask you to share credit card details via email, phone, text message or WhatsApp. We will never ask you to make a bank transfer that differs from the payment terms in your booking confirmation. If you receive an email that appears to have been sent by the accommodation or Booking.com, please be vigilant before clicking on any links.”

^{A Basic-Fit fitness © BELGA PHOTO NICOLAS MAETERLINCK}