On August 1, 2023, the Vermont Office of the Attorney General reported a data breach incident involving Jonas Fitness, Inc. The breach was associated with a vulnerability in the MOVEit Transfer application that occurred on June 1, 2023. The incident potentially involved unauthorized access to personal information of users from various fitness facilities. The exact number of affected individuals and specific data elements compromised are unknown.
Source: https://ago.vermont.gov/document/2023-08-01-jonas-fitness-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/jonas-fitness-inc-
"id": "jon312072825",
"linkid": "jonas-fitness-inc-",
"type": "Vulnerability",
"date": "6/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Fitness',
'name': 'Jonas Fitness, Inc.',
'type': 'Company'}],
'attack_vector': 'Vulnerability Exploitation',
'data_breach': {'type_of_data_compromised': 'Personal Information'},
'date_detected': '2023-06-01',
'date_publicly_disclosed': '2023-08-01',
'description': 'A data breach incident involving Jonas Fitness, Inc., '
'associated with a vulnerability in the MOVEit Transfer '
'application, potentially compromised personal information of '
'users from various fitness facilities.',
'impact': {'data_compromised': 'Personal Information'},
'references': [{'date_accessed': '2023-08-01',
'source': 'Vermont Office of the Attorney General'}],
'title': 'Data Breach at Jonas Fitness, Inc.',
'type': 'Data Breach',
'vulnerability_exploited': 'MOVEit Transfer application vulnerability'}