Basic-Fit hack exposes data of up to 1 million members