Hackers gained access to the fitness chain's member visit registration system in an international cyberattack. Names, addresses, bank account numbers and membership details were downloaded before the intrusion was stopped.