UK'S TOTAL FITNESS EXPOSED NEARLY 500K IMAGES OF MEMBERS, STAFF THROUGH UNPROTECTED DATABASE

Summary from the TLDR InfoSec newsletter

A researcher claims UK gym chain Total Fitness left a database containing over 474,000 member and staff images, including identity documents and payment info, publicly accessible without a password. Total Fitness stated the images were used for legitimate purposes and that only a small subset contained identifiable information. The issue highlights the potential risks of data exposure.