New York Sports Club notified 19,836 individuals, believed to be all employees, that their personal data was stolen due to a data breach.

According to a report from JD Supra, an unauthorized party was able to access information stored on the company’s computer network to steal employees’ sensitive information, including potentially their names, social security numbers and passport numbers.

In response, the fitness club secured its network, bolstered its cybersecurity efforts, and then launched an investigation to learn more about the incident. On September 26, letters were sent to anyone affected by the incident.

New York Sports Club (NYSC) operates clubs in five states, including New York, New Jersey, Massachusetts, and Washington D.C. It employs more than 6,126 people and generates approximately $1 billion in annual revenue.

Photo courtesy New York Sports Club