Bodyhit: 218,000 customers and 42,000 IBANs put up for sale after a cyberattack
On 23 April 2026, a threat actor using the alias 'undef' claimed to be selling a database from French electrostimulation fitness chain Bodyhit, exposing the personal and banking details of more than 218,000 customers, including over 42,000 IBANs.
- Victim
- Bodyhit