Company Details
anytime-fitness
17,439
93,421
None
anytimefitness.com
0
ANY_8185872
In-progress

Anytime Fitness Company CyberSecurity Posture
anytimefitness.comAnytime Fitness is the healthiest franchise opportunity on the planet. As the fastest-growing fitness franchise in the world, Anytime Fitness helps more than three million members in more than three thousand gyms around the globe get to a healthier place. Recently honored as the world’s “Top Global Franchise” by Entrepreneur magazine, Anytime Fitness offers entrepreneurs a convenient and affordable recurring-revenue business model. Franchisees enjoy the luxury of being their own boss, and are given the resources and support to achieve a healthy work/life balance. Anytime Fitness is the perfect fit for entrepreneurs seeking the opportunity to run a business that has the potential to make a profound difference in people’s lives. Entrepreneur Magazine • Top 500 Franchises — 1st • Top Fitness Franchises — 1st • Fastest Growing Franchises — 10th • Top Global Franchises — 10th • Top Franchise for Military Veterans — 4th Forbes • America's Most Promising Companies — 14th • Top 20 Franchises for the Buck — 18th • #9 Best Franchises in America USA Today • Top 50 Franchises for Minorities • Top 50 Franchises for Veterans CNN Money • Top 10 Great Franchise Bets Franchise Times Magazine • #6 Fast and Serious List Club Business International | Magazine • Fastest-Growing Fitness Club in the World • #1 Fitness Franchise in the World • #4 Number of Members • #2 Revenues Star Tribune • Top Workplaces | 2011, 2012, 2013 Minnesota Business Magazine • Best Large Company to Work | 2012, 2013, 2014 G.I. Jobs • Top Military Friendly Franchise | 2010, 2011, 2012, 2013 & 2014 National Minority Franchising Initiative • Top 50 Franchises for Minorities | 2011, 2012, 2013 & 2014 IHRSA - International Health, Racquet and Sportsclub Association • Fastest Growing Fitness Club in the World WorldFranchising.com • Top 25 Franchises for Hispanics FranchiseChatter.com • #1 Best Franchise Business Model
Company Details
anytime-fitness
17,439
93,421
None
anytimefitness.com
0
ANY_8185872
In-progress
Between 750 and 799

Anytime Fitness Global Score (TPRM)XXXX

Description: Self Esteem Brands LLC (operating as Purpose Brands) experienced a **cybersecurity incident** between **December 19, 2023, and June 6, 2024**, exposing sensitive personal data of U.S. consumers. The breach compromised **names, Social Security numbers, tax IDs, driver’s license/passport numbers, financial account details, payment card information, health records, and health insurance data**. The company settled a class-action lawsuit, offering affected individuals reimbursement for **documented losses (up to $5,000 for identity theft/fraud, $2,000 for out-of-pocket expenses)**, compensation for lost time ($80 max), and **two years of credit monitoring with $1M identity theft insurance**. The breach led to potential **identity theft, financial fraud, and reputational harm**, with the settlement fund covering administrative costs, legal fees, and payouts to victims. The incident underscores risks of **unauthorized access to highly sensitive personal and financial data**, though the company denied wrongdoing.


No incidents recorded for Anytime Fitness in 2025.
No incidents recorded for Anytime Fitness in 2025.
No incidents recorded for Anytime Fitness in 2025.
Anytime Fitness cyber incidents detection timeline including parent company and subsidiaries

Anytime Fitness is the healthiest franchise opportunity on the planet. As the fastest-growing fitness franchise in the world, Anytime Fitness helps more than three million members in more than three thousand gyms around the globe get to a healthier place. Recently honored as the world’s “Top Global Franchise” by Entrepreneur magazine, Anytime Fitness offers entrepreneurs a convenient and affordable recurring-revenue business model. Franchisees enjoy the luxury of being their own boss, and are given the resources and support to achieve a healthy work/life balance. Anytime Fitness is the perfect fit for entrepreneurs seeking the opportunity to run a business that has the potential to make a profound difference in people’s lives. Entrepreneur Magazine • Top 500 Franchises — 1st • Top Fitness Franchises — 1st • Fastest Growing Franchises — 10th • Top Global Franchises — 10th • Top Franchise for Military Veterans — 4th Forbes • America's Most Promising Companies — 14th • Top 20 Franchises for the Buck — 18th • #9 Best Franchises in America USA Today • Top 50 Franchises for Minorities • Top 50 Franchises for Veterans CNN Money • Top 10 Great Franchise Bets Franchise Times Magazine • #6 Fast and Serious List Club Business International | Magazine • Fastest-Growing Fitness Club in the World • #1 Fitness Franchise in the World • #4 Number of Members • #2 Revenues Star Tribune • Top Workplaces | 2011, 2012, 2013 Minnesota Business Magazine • Best Large Company to Work | 2012, 2013, 2014 G.I. Jobs • Top Military Friendly Franchise | 2010, 2011, 2012, 2013 & 2014 National Minority Franchising Initiative • Top 50 Franchises for Minorities | 2011, 2012, 2013 & 2014 IHRSA - International Health, Racquet and Sportsclub Association • Fastest Growing Fitness Club in the World WorldFranchising.com • Top 25 Franchises for Hispanics FranchiseChatter.com • #1 Best Franchise Business Model

Norman Smile Center is Norman's premier destination for all of your dental needs. Dentists Jamie Belknap, DDS, Donna Sparks, DDS, and Kristen Campbell, DDS, Norman OK, practice a full scope of general and cosmetic dentistry with expertise ranging from porcelain veneers to dental implants, crowns and
.png)
Exclusive Sensitive info from hundreds of thousands of gym customers and staff – including names, financial details, and potentially...
Cybersecurity Researcher Jeremiah Fowler discovered and reported to Website Planet about an unencrypted and non-password-protected database...
The Planet Fitness SWOT analysis is vital for understanding the dynamics of one of the largest and fastest-growing fitness franchises in the...
Ireland has taken part in a major international cyber defence training exercise involving critical infrastructure coming under simulated...
Scotty Carlisle served in the Army and returned to civilian life with a list of goals. After achieving them all, he realized he wanted more,...
Do you work out? Before COVID-19 struck, over 1 in 5 Americans belonged to at least one health club or studio in the US in 2019. As gyms and...
Fitness devices and children's smart toys, as well as other connected devices, can be easily manipulated by domestic abusers seeking to...
Former-military members of CCI joined the Irish Team for Exercise Cyber Coalition, which is NATO's flagship annual Cyber Defence Exercise.
A team made up of the Netherlands' National Cyber Security Centre and Heineken have won the Cyber Core 2019 exercise that simulated a wave...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Anytime Fitness is http://AnytimeFitness.com.
According to Rankiteo, Anytime Fitness’s AI-generated cybersecurity score is 778, reflecting their Fair security posture.
According to Rankiteo, Anytime Fitness currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Anytime Fitness is not certified under SOC 2 Type 1.
According to Rankiteo, Anytime Fitness does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Anytime Fitness is not listed as GDPR compliant.
According to Rankiteo, Anytime Fitness does not currently maintain PCI DSS compliance.
According to Rankiteo, Anytime Fitness is not compliant with HIPAA regulations.
According to Rankiteo,Anytime Fitness is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Anytime Fitness operates primarily in the Health, Wellness & Fitness industry.
Anytime Fitness employs approximately 17,439 people worldwide.
Anytime Fitness presently has no subsidiaries across any sectors.
Anytime Fitness’s official LinkedIn profile has approximately 93,421 followers.
Anytime Fitness is classified under the NAICS code None, which corresponds to Others.
No, Anytime Fitness does not have a profile on Crunchbase.
Yes, Anytime Fitness maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/anytime-fitness.
As of December 11, 2025, Rankiteo reports that Anytime Fitness has experienced 1 cybersecurity incidents.
Anytime Fitness has an estimated 3,954 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Breach.
Total Financial Loss: The total financial loss from these incidents is estimated to be $0.
Detection and Response: The company detects and responds to cybersecurity incidents through an recovery measures with class action settlement offering compensation and credit monitoring, and communication strategy with notices sent to affected individuals with claim instructions (unique id/pin provided)..
Title: Purpose Brands (Self Esteem Brands) Data Breach
Description: A cybersecurity incident affecting Self Esteem Brands (doing business as Purpose Brands) occurred between December 19, 2023, and June 6, 2024, exposing sensitive personal information of U.S. consumers. The breach led to a class action lawsuit, with the company agreeing to a settlement offering compensation, credit monitoring, and identity theft protection to affected individuals.
Date Detected: 2024-06-06
Type: Data Breach
Common Attack Types: The most common types of attacks the company has faced is Breach.

Data Compromised: Names, Social security numbers, Tax identification numbers, Driver’s license numbers, Passport numbers, Financial account information, Payment card information, Health information, Health insurance information
Brand Reputation Impact: Class action lawsuit and settlement
Legal Liabilities: Class action lawsuit settled; company denies wrongdoing
Identity Theft Risk: High (SSNs, financial, and health data exposed)
Payment Information Risk: High (payment card and financial account information exposed)
Average Financial Loss: The average financial loss per incident is $0.00.
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personally Identifiable Information (Pii), Financial Data, Health Information and .

Entity Name: Self Esteem Brands LLC (dba Purpose Brands)
Entity Type: Corporation
Industry: Health/Wellness (Franchise Business, e.g., Anytime Fitness)
Location: United States
Customers Affected: U.S. residents notified of the breach (exact number undisclosed)

Recovery Measures: Class action settlement offering compensation and credit monitoring
Communication Strategy: Notices sent to affected individuals with claim instructions (unique ID/PIN provided)

Type of Data Compromised: Personally identifiable information (pii), Financial data, Health information
Sensitivity of Data: High (includes SSNs, tax IDs, health, and financial data)
Data Exfiltration: Likely (files containing personal information exposed)
Personally Identifiable Information: NamesSocial Security numbersTax identification numbersDriver’s license numbersPassport numbers
Data Recovery from Ransomware: The company recovers data encrypted by ransomware through Class action settlement offering compensation and credit monitoring.

Legal Actions: Class action lawsuit settled (no admission of wrongdoing)
Ensuring Regulatory Compliance: The company ensures compliance with regulatory requirements through Class action lawsuit settled (no admission of wrongdoing).

Source: Class Action Settlement Notice

Source: Settlement Administrator Contact
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Class Action Settlement Notice, and Source: Settlement Administrator Contact.

Investigation Status: Settled (class action lawsuit resolved; no further details on forensic investigation)
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Notices sent to affected individuals with claim instructions (unique ID/PIN provided).

Stakeholder Advisories: Notices sent to affected individuals with claim instructions (ID/PIN provided for online claims).
Customer Advisories: Eligible individuals can file claims for compensation (up to $5,000), credit monitoring (2 years), or a $25 cash payment. Deadline: December 31, 2025.
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Notices sent to affected individuals with claim instructions (ID/PIN provided for online claims)., Eligible individuals can file claims for compensation (up to $5,000), credit monitoring (2 years), or a $25 cash payment. Deadline: December 31 and 2025..

Corrective Actions: Settlement agreement (compensation, credit monitoring) to mitigate harm to affected individuals.
Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Settlement agreement (compensation, credit monitoring) to mitigate harm to affected individuals..
Most Recent Incident Detected: The most recent incident detected was on 2024-06-06.
Highest Financial Loss: The highest financial loss from an incident was {'settlement_fund': {'administration_costs': '$14,400', 'attorneys_fees': '$150,000', 'class_representative_award': '$3,000', 'credit_monitoring_costs': 'Dependent on valid claims', 'payments_to_class_members': 'Dependent on valid claims'}, 'compensation': {'ordinary_losses': 'Up to $2,000 (documented out-of-pocket expenses + $80 for lost time)', 'extraordinary_losses': 'Up to $5,000 (identity theft/fraud)', 'alternative_cash_payment': '$25 (one-time, no documentation required)'}}.
Most Significant Data Compromised: The most significant data compromised in an incident were Names, Social Security numbers, Tax identification numbers, Driver’s license numbers, Passport numbers, Financial account information, Payment card information, Health information, Health insurance information and .
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Payment card information, Financial account information, Names, Social Security numbers, Tax identification numbers, Health insurance information, Passport numbers, Health information and Driver’s license numbers.
Most Significant Legal Action: The most significant legal action taken for a regulatory violation was Class action lawsuit settled (no admission of wrongdoing).
Most Recent Source: The most recent source of information about an incident are Class Action Settlement Notice and Settlement Administrator Contact.
Current Status of Most Recent Investigation: The current status of the most recent investigation is Settled (class action lawsuit resolved; no further details on forensic investigation).
Most Recent Stakeholder Advisory: The most recent stakeholder advisory issued was Notices sent to affected individuals with claim instructions (ID/PIN provided for online claims)., .
Most Recent Customer Advisory: The most recent customer advisory issued were an Eligible individuals can file claims for compensation (up to $5,000), credit monitoring (2 years), or a $25 cash payment. Deadline: December 31 and 2025.
.png)
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.
Neuron is a PHP framework for creating and orchestrating AI Agents. In versions 2.8.11 and below, the MySQLWriteTool executes arbitrary SQL provided by the caller using PDO::prepare() + execute() without semantic restrictions. This is consistent with the name (“write tool”), but in an LLM/agent context it becomes a high-risk capability: prompt injection or indirect prompt manipulation can cause execution of destructive queries such as DROP TABLE, TRUNCATE, DELETE, ALTER, or privilege-related statements (subject to DB permissions). Deployments that expose an agent with MySQLWriteTool enabled to untrusted input and/or run the tool with a DB user that has broad privileges are impacted. This issue is fixed in version 2.8.12.
Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool (e.g., for LLM agent querying, however, validation based on the first keyword (e.g., SELECT) and a forbidden-keyword list does not block file-writing constructs such as INTO OUTFILE / INTO DUMPFILE. As a result, an attacker who can influence the tool input (e.g., via prompt injection through a public agent endpoint) may write arbitrary files to the DB server if the MySQL/MariaDB account has the FILE privilege and server configuration permits writes to a useful location (e.g., a web-accessible directory). This issue is fixed in version 2.8.12.
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. When using versions 4.11.0 through 4.11.2 and 4.12.0, simultaneous requests on the same client may result in improper lookups in the TokenRequestCache for the request results. This issue is fixed in versions 4.11.2 and 4.12.1.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.