Bodybuilding.com, LLC

Bodybuilding.com experienced a data security incident involving unauthorized access to its systems, traced to a phishing email received in July 2018. The breach potentially exposed customer names, emails, passwords, billing/shipping addresses, phone numbers, order history, birthdates, and BodySpace profile information. Bodybuilding.com engaged forensic investigators, coordinated with law enforcement, reset customer passwords, and implemented additional security measures. No evidence of credit card number access was found.

Bodybuilding.com LLC, operated by Vitalize, LLC reported to HHS on 2019-04-19 a Hacking/IT Incident affecting 3,193 individuals. Breached information located on Network Server. The incident involved protected health information (PHI) including names, dates of birth, Social Security numbers, health insurance information, treatment information, and claims data. The covered entity implemented administrative and technical safeguards and retrained staff.

Bodybuilding.com (a subsidiary of Vitalize LLC) notified customers of a data breach involving unauthorized access to systems. The incident originated from a phishing email in July 2018, discovered in February 2019. Potentially accessed data included names, emails, passwords, and billing addresses. No full credit card numbers were stored. The company engaged forensic consultants, reset passwords, and coordinated with law enforcement.