8fit

In July 2018 the health and fitness application 8fit suffered a significant data breach that exposed the personal information of approximately 15 million users. The compromised data included email addresses, names, gender, and IP addresses. Additionally, passwords stored as bcrypt hashes were part of the leak. The stolen database later appeared for sale on a darknet marketplace in early 2019 as part of a larger collection of breached services. The incident highlights vulnerabilities in mobile application backends and the ongoing threat of credential theft for monetization in underground forums.