XponentialFitness

In March 2022 the major boutique fitness franchise group Xponential Fitness suffered a significant data exposure affecting approximately 179000 customers. The incident was caused by an insecure backup file left accessible on the internet without proper authentication. This misconfiguration allowed unauthorized parties to access sensitive member information stored within the database backup. The exposed data included personal identifiers and contact details of gym members across various brands under the Xponential umbrella.