The threat actor claims to be selling an alleged Basic-Fit customer database affecting more than 6 million users worldwide. According to the post, the dataset includes member IDs, email addresses, names, gender, date of birth, phone numbers, addresses, membership details, billing information, IBANs, payment references, visit history, referral codes, registration data, and password hashes.