Clubessential Holdings, Xplor Technologies, Xplor Resamania and Xplor: Alleged security breach exposes over 5.2 million gym customer records

Xplor Resamania Faces Alleged Data Breach Exposing 5.2 Million Records

A threat actor has claimed responsibility for a potential data breach at Xplor Resamania, a software provider specializing in management solutions for gyms and sports centers. The cybercriminal posted on the dark web, alleging the theft of a database containing 5.2 million records belonging to organizations across France, Switzerland, Belgium, Luxembourg, the UK, Germany, and Spain.

The exposed data reportedly includes full names, email addresses, phone numbers, postal addresses, dates of birth, membership details, club information, subscription dates, pricing data, staff indicators, and customer/supplier identifiers. The breach’s scope suggests widespread impact, though Xplor Technologies (Xplor Resamania’s parent company) has not confirmed or denied the incident at the time of reporting.

Xplor Resamania, originally founded in France as Resamania, expanded globally after merging with Xplor Technologies and later Clubessential Holdings in March 2024. The combined entity now operates as Xplor, serving over 61,000 fitness centers worldwide. No official response has been issued regarding the breach claims, though the company has been contacted for clarification. Further updates may follow pending their statement.

Source: https://www.escudodigital.com/en/cybersecurity/alleged-security-breach-exposes-over-52-million-gym-customer-records.html

Clubessential Holdings TPRM report: https://www.rankiteo.com/company/xplor-technologies

Xplor Technologies TPRM report: https://www.rankiteo.com/company/xplor-technologies

Xplor Resamania TPRM report: https://www.rankiteo.com/company/xplor-technologies

Xplor TPRM report: https://www.rankiteo.com/company/xplor-technologies

"id": "xpl1786084287",
"linkid": "xplor-technologies",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Organizations across France, '
                                              'Switzerland, Belgium, '
                                              'Luxembourg, the UK, Germany, '
                                              'and Spain',
                        'industry': 'Fitness and Sports Management',
                        'location': 'Global (Headquartered in France)',
                        'name': 'Xplor Resamania',
                        'size': '61,000+ fitness centers served worldwide',
                        'type': 'Software Provider'}],
 'data_breach': {'data_exfiltration': 'Alleged',
                 'number_of_records_exposed': '5.2 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (Personally Identifiable '
                                        'Information)',
                 'type_of_data_compromised': ['Full names',
                                              'Email addresses',
                                              'Phone numbers',
                                              'Postal addresses',
                                              'Dates of birth',
                                              'Membership details',
                                              'Club information',
                                              'Subscription dates',
                                              'Pricing data',
                                              'Staff indicators',
                                              'Customer/supplier identifiers']},
 'description': 'A threat actor has claimed responsibility for a potential '
                'data breach at Xplor Resamania, a software provider '
                'specializing in management solutions for gyms and sports '
                'centers. The cybercriminal posted on the dark web, alleging '
                'the theft of a database containing 5.2 million records '
                'belonging to organizations across France, Switzerland, '
                'Belgium, Luxembourg, the UK, Germany, and Spain. The exposed '
                'data reportedly includes full names, email addresses, phone '
                'numbers, postal addresses, dates of birth, membership '
                'details, club information, subscription dates, pricing data, '
                'staff indicators, and customer/supplier identifiers.',
 'impact': {'data_compromised': '5.2 million records',
            'identity_theft_risk': 'High'},
 'investigation_status': 'Unconfirmed',
 'references': [{'source': 'Dark web post by threat actor'}],
 'threat_actor': 'Unknown threat actor',
 'title': 'Xplor Resamania Alleged Data Breach Exposing 5.2 Million Records',
 'type': 'Data Breach'}