[Contained][Severity: Critical][Intrusion]

Myvo Fellows: member system intrusion leaks 426 people’s data; Myvo App discontinued

An intrusion leaked 426 members’ IDs, emails and point data. The suspended app ended on 15 October. This is separate from the Cuenote mailing contractor breach.

Disclosed

2026-10-13

Organizations involved

Leaked or at risk

426

Downtime

Unknown

What happened

Many unusual requests reached the membership system on 21 September. A log review found the intrusion on 8 October; access was blocked and Myvo App was suspended the next day. The initial 13 October notice estimated 419 people, revised to a final 426 on 2 November. [1]

Impact and response

The leak includes member numbers, emails, registration status, membership tiers, point balances and expiring points and dates. Names, addresses, phone numbers, birth dates, passwords and card data are excluded. No publication or misuse was confirmed as of 2 November. Affected members were contacted by email and postcard. [1]

Myvo App ended on 15 October; no damage was confirmed in DCM App. The membership scheme changed its name on 1 November. This member system incident is separate from the Cuenote mailing contractor breach disclosed on 27 October, and their counts must not be added. [1]