Glofox
Disclosed Dec 9, 20205 years ago2,330,735 accountsConfirmed
In March 2020, the Irish gym management software company Glofox suffered a data breach which exposed 2.3M membership records . The data included email addresses, names, phone numbers, genders, dates of birth and passwords stored as unsalted MD5 hashes.
What is known
| People affected | 2,330,735 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Dec 9, 2020 |
| Happened | Sep 26, 2020 |
| Attack | Not stated |
| Data exposed | Dates of birth, Emails, Names, Passwords, Phone numbers |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Glofoxoag.ca.gov · Official notice | Official notice |
| Have I Been Pwned: Glofoxhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Dec 9, 2020 | |
| Have I Been Pwnedaccounts in the data | Jan 10, 2021 | 2,330,735 |
History of this record
- 2026-09-25 · hibp: empty to Glofox · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · data_types: [] to ["dob","emails","names","passwords","phone"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 2330735 · backfill source
- 2026-09-25 · summary: empty to In March 2020, the Irish gym management software company Glofox suffered a data breach which exposed 2.3M membership records . The data included email addresses, names, phone numbers, genders, dates of birth and passwords stored as unsalted · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.