Bodybuilding.com fitness and bodybuilding fan website notified its customers of a security breach detected during February 2019. The breach was the direct result of a phishing email received back in July 2018. The company said that it “could not rule out that personal information may have been accessed”” The company also stated that there were no full debit or credit card numbers impacted in the security breach because it only stores only the last four digits and only for customers who opted to have their cards stored with their account information. Customers who receive the breach notification email are also advised to change their passwords.”
Source: https://www.bleepingcomputer.com/news/security/bodybuildingcom-security-breach-all-customer-passwords-reset/