i-Fitness Gym & Wellness Centres listed by the Arcus Media ransomware group

Overview

The Arcus Media ransomware group has listed i-Fitness Gym & Wellness Centres, a Nigerian gym and fitness chain, on its leak site. The listing, dated 13 July 2026, carries a deadline of 21 July 2026, indicating an active negotiation window.

What was published

The group claims to have copied data from the chain's systems. Gym operations typically hold member profiles, contact details, payment information and staff records, which are the likely contents of any exfiltration.

Risks for affected individuals

• Members' personal and payment data may be exposed.
• Phishing campaigns could reference gym memberships.
• Staff records may be included in the leak.

What remains unknown

• The volume of data exfiltrated.
• Whether the deadline has passed and data released.
• The extent of the intrusion.

What affected people should do

Members should monitor payment cards and watch for phishing that mentions the gym. The company should notify members and staff, review compromised systems, and advise password changes for accounts linked to the brand.