Glofox

Disclosed Dec 9, 20202,330,735 accountsConfirmed

In March 2020, the Irish gym management software company Glofox suffered a data breach which exposed 2.3M membership records . The data included email addresses, names, phone numbers, genders, dates of birth and passwords stored as unsalted MD5 hashes.

What is known

People affected	2,330,735 (accounts in the leaked data, per Have I Been Pwned)
Disclosed	Dec 9, 2020
Happened	Sep 26, 2020
Attack	Not stated
Data exposed	Dates of birthEmailsNamesPasswordsPhone numbers
Sector	Tech · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Glofox

Aggregatorhaveibeenpwned.com

Have I Been Pwned: Glofox

Notices filed

Residents of CADec 9, 2020

California AGCount not stated

Accounts in the dataJan 10, 2021

Have I Been Pwned2,330,735 people

History of this record

hibp2026-09-25

empty to Glofoxby backfillSource

sector2026-09-25

other to techby backfillSource

data_types2026-09-25

[] to ["dob","emails","names","passwords","phone"]by backfillSource

records_basis2026-09-25

empty to hibpby backfillSource

records2026-09-25

empty to 2330735by backfillSource

summary2026-09-25

empty to In March 2020, the Irish gym management software company Glofox suffered a data breach which exposed 2.3M membership records . The data included email addresses, names, phone numbers, genders, dates of birth and passwords stored as unsaltedby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Glofox