SATS Group Hit by Cybersecurity Breach Affecting Nordic Fitness Chains
On 14 March, the SATS Group operator of fitness chains including Elixia, SATS, Fresh Fitness, SATS Yoga, and Balance reported a data security breach to authorities. The company, which manages over 270 gyms across Finland, Norway, Sweden, and Denmark, serves 730,000 members with a workforce of 10,000 employees.
While initial assessments suggested a limited impact, SATS later confirmed the incident was more extensive than first believed. However, the company stated there is no evidence that member data or its membership system was compromised. Cybersecurity experts are assisting in the ongoing investigation.
The full scope of the breach remains under review, but SATS has not disclosed further details on potential vulnerabilities or the nature of the attack. The incident highlights growing cybersecurity risks for large-scale fitness and wellness operators in the Nordic region.
Source: https://yle.fi/a/74-20217262
Elixia cybersecurity rating report: https://www.rankiteo.com/company/elixia
Balance Collective cybersecurity rating report: https://www.rankiteo.com/company/balance-collective-gyms
Fresh Fitness Food cybersecurity rating report: https://www.rankiteo.com/company/fresh-fitness-food-limited
SATS Group Of Companies cybersecurity rating report: https://www.rankiteo.com/company/sats-group-of-companies
SATS Norge cybersecurity rating report: https://www.rankiteo.com/company/satsnorge
"id": "ELIBALFRESATSAT1774442139",
"linkid": "elixia, balance-collective-gyms, fresh-fitness-food-limited, sats-group-of-companies, satsnorge",
"type": "Breach",
"date": "3/2026",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': '730,000 members',
'industry': 'Fitness and Wellness',
'location': ['Finland', 'Norway', 'Sweden', 'Denmark'],
'name': 'SATS Group',
'size': '10,000 employees',
'type': 'Corporation'}],
'date_detected': '2024-03-14',
'date_publicly_disclosed': '2024-03-14',
'description': 'SATS Group, operator of fitness chains including Elixia, '
'SATS, Fresh Fitness, SATS Yoga, and Balance, reported a data '
'security breach to authorities. The incident was initially '
'assessed as limited but later confirmed to be more extensive. '
'There is no evidence that member data or the membership '
'system was compromised. Cybersecurity experts are assisting '
'in the ongoing investigation.',
'investigation_status': 'Ongoing',
'references': [{'source': 'Incident Report'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to '
'authorities'},
'response': {'third_party_assistance': 'Cybersecurity experts'},
'title': 'SATS Group Cybersecurity Breach Affecting Nordic Fitness Chains',
'type': 'Data Security Breach'}