PayAsUGym

PayAsUGym is a UK-based fitness pass provider offering access to a network of gyms and fitness facilities through a subscription or pass model. It serves customers primarily in the United Kingdom. The company processes payments via a tokenized system, ensuring that financial data is not stored on its servers. It emphasizes encrypted password storage for user accounts. The service differentiates itself by focusing on convenience and flexibility for users seeking varied workout options without long-term gym contracts.

In December 2016, the provider disclosed a security breach affecting approximately 300,000 customer email addresses and associated encrypted passwords, though no payment information was compromised due to its off‑site tokenization approach. Following the incident, the company migrated its servers, notified law enforcement, and advised affected users to reset passwords after some credentials appeared online. It attributed the attack to the rising prevalence of cyber threats targeting online services. The firm reiterated its commitment to not retaining sensitive payment data and highlighted its existing security measures as part of its response. No further details about ownership, parent companies, or subsidiary relationships are provided in the source material.