Comparison Overview
Gold's Gym

Gold's Gym
5420 Lyndon B Johnson Fwy, Suite 300, Dallas, Texas, US, 75240
Last Update: 01/04/2026
Gold’s Gym has been the world’s trusted fitness authority since 1965. From its beginning as a small gym in Venice, California, Gold’s Gym has grown into a global icon with more than 700 locations serving 3 million people across six continents each day. Whether you are...

Massage Envy
14350 N. 87th St., Suite 200, Scottsdale, 85260, US
Last Update: 30/03/2026
Massage Envy is a leading wellness franchise providing professional massage, skin care, and assisted stretch services nationwide. Co-founded by a massage therapist in 2002, the brand’s mission is simple: make total body care accessible and affordable so people can feel ...
Compliance Ranges Comparison

Gold's Gym







Massage Envy






Benchmark & Cyber Underwriting Signals
Incidents vs Wellness and Fitness Services Industry Avg (This Year)
No incidents recorded for Gold's Gym in 2026.
Incidents vs Wellness and Fitness Services Industry Avg (This Year)
No incidents recorded for Massage Envy in 2026.
Incident History - Gold's Gym (X = Date, Y = Severity)
Gold's Gym cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Massage Envy (X = Date, Y = Severity)
Massage Envy cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Gold's Gym

Massage Envy
FAQ
Latest Global CVEs
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.