One of the world’s biggest online fitness stores, Bodybuilding.com, announced that a breach of its systems compromised personal user data.
A phishing attack targeting its staff in July 2018, led to the subsequent exposure of its servers to hackers.
Registered in 1999, Bodybuilding.com claims to receive 35 million unique visitors per month, with well over 9 million members in its Bodyspace community.
So what type of data was exposed?
Bodybuilding.com data breach – Photo by Jonathan Borba on Unsplash
According to Bodybuilding.com’s announcement, it didn’t include credit card numbers.
While we have no evidence that personal information was accessed or misused, information you provided to us which might have been accessed in this incident could include name, email address, billing/shipping addresses, phone number, order history, any communications with Bodybuilding.com, birthdate, and any information included in your BodySpace profile. […] If you have an online account with us, Bodybuilding.com user names and passwords might have been accessed.
Importantly, the information potentially accessed in this incident does NOT include full credit or debit card numbers, as we do not store those numbers when customers make purchases in our store. If you’ve opted to store your card in your account, we store the last four digits of your payment card number for reference and use by you for subsequent purchases, but never the entire card number.
If you have a Bodybuilding.com account, time to reset your password and hope for the best.
How Much Ya Bench?
https://www.nbc.com/saturday-night-live/video/how-much-ya-bench/2860981