KillSec ransomware gang claims attack on Clubfit Software fitness management
Learn More
The KillSec ransomware gang is claiming a potentially massive data breach affecting Clubfit Software, an Australian gym management software provider, with implications for hundreds of fitness facilities across the country.
Clubfit Software provides cloud-based management solutions for tracking payments, reporting, access control, marketing, and statistical analytics.
The attack was claimed on the gang's dark web leak site on November 24, 2024, where they have already published what they claim is 1% of stolen data, amounting to nearly 200 gigabytes. The breach is claimed to affect 694 fitness centers, including major franchises like Anytime Fitness, along with various leisure centers, boxing gyms, and independent fitness facilities.
The exposed information includes highly sensitive customer data from gym membership agreements, such as:
- Gym membership agreements
- Customer names
- Physical addresses
- Phone numbers
- Email addresses
- Emergency contact information
- Customer signatures
- Client business information
The full scope of the breach remains unclear, as the ransomware gang has only released a small portion of the allegedly stolen data.
Clubfit Software has not yet publicly responded to the incident. The ransomware gang has begun contacting Clubfit's clients directly and has threatened to publish all stolen data on their blog, escalating the pressure on the affected businesses.
