Gym Management Service Data Breach May Expose PII

Gym Management Service, Inc., a company that operated a number of Gold's Gym locations in California, experienced a data breach that occurred between Jul. 25, 2025, and Sept. 3, 2025.

On Aug. 16, 2026, the company observed unusual activity on its computer network. Investigations with third-party analysts to review exactly when the breach occured and what types of information were exposed were launched.

According to filings with state authorities, the breach was disclosed to the California Attorney General on Jan. 13, 2026, and to the Vermont Attorney General on Jan. 15, 2026.

It is not clear exactly how the breach occurred, what systems were compromised, or who was responsible for the incident. The specific number of individuals affected along with the types of consumer information exposed has also not yet been disclosed in the available notices.

Gym Management Service's response

The company is offering affected individuals access to complimentary credit monitoring, credit report, and credit score services for 12 months through Cyberscout, a TransUnion company. These services include alerts for changes to a credit file and proactive fraud assistance. Affected individuals are encouraged to enroll in these services within 90 days of receiving their notification letter.

Those impacted are also advised to remain vigilant by reviewing their credit reports and account statements for suspicious activity. Individuals are entitled to one free credit report annually from each of the three major credit bureaus—TransUnion, Experian, and Equifax.

Additional protective steps include placing a fraud alert or credit freeze on credit files, both of which are available at no cost. Contact information for the credit bureaus and additional resources from the Federal Trade Commission are provided in the company’s consumer notice.