
Studio K-Fit
Exclusive and Effective Fitness Guided by Fitness Professionals



Exclusive and Effective Fitness Guided by Fitness Professionals

Planet Fitness is taking the fitness industry by storm! Enhancing people’s lives with an affordable, high-quality fitness experience requires a team of inspiring, motivated and fun-loving go-getters. As one of the largest and fastest-growing franchisors and operators of fitness centers in the United States, Planet Fitness is just getting warmed up. We’re continuously seeking top talent to join us in cultivating the Judgement Free Zone® and shaping the future of our brand. With more than 2,600 locations in all 50 states, the District of Columbia, Puerto Rico, Canada, Panama, Mexico, Australia and Spain, there’s plenty of opportunity on our Planet and we are always looking for talented individuals to join our team! NOTE TO JOB APPLICANTS: We have been made aware of an increasing number of hiring fraud schemes across numerous platforms. Planet Fitness never requires advance payments of any kind for computer equipment or any other purpose at the start of employment. Any request for you to provide payment information during the application process is part of a fraud scheme. Further, we recommend that you do not provide sensitive personal information (SSN, DOB, driver’s license number) as part of the initial application process.
Security & Compliance Standards Overview












No incidents recorded for Studio K-Fit in 2026.
No incidents recorded for Planet Fitness in 2026.
Studio K-Fit cyber incidents detection timeline including parent company and subsidiaries
Planet Fitness cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.
The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.
XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services
Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda and red_url parameters.
A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda parameter.