Genae Écully
ModerateReportedRetail
A data exposure was claimed on 2 October 2026 against the Genae Écully gym, near Lyon, taken from the FitnessKPI analytics platform that it uses. The company confirmed an intrusion through a compromised account and said it neutralised that access. The analysed file holds 1,847 member profiles of the Écully club: names, email addresses, phone numbers, postal codes, dates of birth, age, gender and internal identifiers. It also includes subscription plan, contract dates, last visit, a cancellation-risk rating and nearly 160,000 payment records since 2021 (amounts, due dates, statuses, unpaid balances); according to the company, no card number, CVV or IBAN is involved.
This information lets a third party craft credible phishing messages or calls based on the person's actual membership, payments and unpaid balances.
- Disclosed on
- October 2, 2026
- Accounts affected
- 1,847
- Sector
- Retail
- Country
- France
- Cause
- Third-party provider
Exposed data
- Full name
- Email address
- Phone number
- Date of birth
- Customer ID
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact