Bodybuilding.com, LLC

Bodybuilding.com (a subsidiary of Vitalize LLC) notified customers of a data breach involving unauthorized access to systems. The incident originated from a phishing email in July 2018, discovered in February 2019. Potentially accessed data included names, emails, passwords, and billing addresses. No full credit card numbers were stored. The company engaged forensic consultants, reset passwords, and coordinated with law enforcement.

Bodybuilding.com (Vitalize, LLC) disclosed a data breach affecting customer accounts. Unauthorized access originated from a phishing email received in July 2018, but the incident was not discovered until February 2019. The investigation confirmed that some data was exfiltrated, though the specific files are unknown. Affected data may include names, email addresses, passwords, billing/shipping addresses, phone numbers, order history, birthdates, and BodySpace profile information. Full credit card numbers were not stored. The company engaged forensic consultants, reset passwords, and coordinated with law enforcement.

Bodybuilding.com LLC, operated by Vitalize, LLC reported to HHS on 2019-04-19 a Hacking/IT Incident affecting 3,193 individuals. Breached information located on Network Server. The incident involved protected health information (PHI) including names, dates of birth, Social Security numbers, health insurance information, treatment information, and claims data. The covered entity implemented administrative and technical safeguards and retrained staff.