JoFit, a consumer fitness company, disclosed a data breach in mid-January 2024 where its website was targeted by a cybersecurity attack exploiting a vulnerability to acquire customer credit card information. The incident exposed names and credit card payment data. JoFit notified law enforcement, hired forensic consultants, and provided one year of complimentary identity monitoring via Equifax to affected individuals.