MY

MyFitnessPal

Critical

In February 2018, 143M MyFitnessPal user records were exposed, including passwords secured with SHA-1 or bcrypt hashes.

143,606,147 recordsBreach Feb 1, 2018Updated Feb 21, 2019

Exposed data classes

Fields reported as compromised in this breach record.

Email addressesIP addressesPasswordsUsernames

Detailed Analysis

In-depth analysis of the breach and its implications.

MyFitnessPal, a diet and exercise service, experienced a data breach on February 2018 that compromised 143,606,147 user records. The breach involved email addresses, usernames, IP addresses, and passwords, stored as either SHA-1 or bcrypt hashes depending on the account age. This data was later observed being sold on dark web marketplaces and circulated within cybercrime communities.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users' personal information, mainly authentication credentials and contact details, were at risk, potentially leading to identity theft or unauthorized account access.
Business Impact
MyFitnessPal faced reputation damage, user trust issues, and potential regulatory scrutiny.
Affected Sectors
  • Health and Fitness
  • Online Applications
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Change MyFitnessPal password immediately.
  • Enable account security features such as two-factor authentication.
  • Monitor your email account for suspicious activity.

Preventive Measures

  • Use unique passwords for each account.
  • Leverage password manager tools.
  • Enhance account security with robust authentication measures.

Frequently Asked Questions

Common questions about this breach and what it means for you.

The breach exposed usernames, email addresses, IP addresses, and password hashes.