HackingOtherCustomer Data InvolvedPIIIdentity (basic)LowResolved

Gym Management Service Inc

bd_244d7623feec9744 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jan 13, 2026

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

70%

Full breach record for Gym Management Service Inc →

Gym Management Services, Inc. experienced a security incident between July 25, 2025 and September 3, 2025 affecting personal information of individuals. The company notified affected residents across multiple states and offered 12 months of complimentary credit monitoring through Cyberscout, a TransUnion company.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 25, 2025

Begins

Jan 13, 2026

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_f77c1cfd31517d122026-01-13Verified
Nebraska State AGbd_4816be84726663362026-01-12 · +1dVerified
Vermont State AGbd_5ca4c55cb964ef662026-01-12 · +1dVerified

Name: Gym Management Service Inc
norm: gym management service

Name: Gym Management Service Inc
norm: gym management service
Industry: Otherllm

Discovered: —
Breach occurred: Jul 25, 2025 – Sep 3, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge for 12 months via Cyberscout, a TransUnion company
Changes made: Acted promptly to ensure this incident was remediated and that none of the information described above would be misused
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Nebraska State AGJan 12 · first

Vermont State AGJan 12 · first

Indiana State AG+1d

California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-616994
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 13, 2026
Raw hash: c248c3bbd59aa5e1ec4fa8a449b4b3e5591557688a2475b9f7c0b2e143315771

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityGym Management Service Inc

Victim entityGym Management Service Inc

IncidentUnauthorized Access

Stated responseProviding access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge for 12 months via Cyberscout, a TransUnion company

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov