Harman Fitness Data Breach Exposes Personal and Health Information

Harman Fitness, a Los Angeles-based Crunch Fitness franchise operator, disclosed a data breach that involved unauthorized access to its network.

On Sept. 4, 2025, Harman Fitness experienced a data security incident involving unauthorized access to its network. The company's investigation into the incident revealed that certain files containing personally identifiable information may have been accessed without authorization.

The types of information exposed included names, addresses, dates of birth, Social Security numbers, driver's license numbers, state-issued identification numbers, passport numbers, financial information (including account numbers, credit or debit card numbers and bank account numbers with routing numbers), medical information and health insurance information.

The company stated that no financial passwords or banking passwords were involved in the incident. It also noted that individuals who entered their banking information directly through ADP, a payroll and human resources platform, were not impacted with regard to that banking data.

The breach was reported to the attorneys general offices of California and Texas on Oct. 6, 2026, with 1,057 Texas residents identified as affected.

Harman Fitness began notifying affected consumers on Oct. 5, 2026, by U.S. Mail.

Harman Fitness' response to the breach

The company is offering complimentary credit monitoring and identity protection services through Experian IdentityWorks as a precaution.

Affected individuals can enroll in the Experian IdentityWorks program by visiting the enrollment page and entering the unique activation code included in their notification letter. The deadline to enroll is Dec. 31, 2026.

Harman Fitness has also set up a dedicated toll-free response line at 833-514-1448 for individuals who have questions about the incident. The line is available Monday through Friday from 9 a.m. to 9 p.m. Eastern Time, excluding major U.S. holidays.