Back to Radar
MY

MyFitnessPal

Critical

In February 2018, 143M MyFitnessPal user records were exposed, including passwords secured with SHA-1 or bcrypt hashes.

Records exposed
143,606,147 records
Breach date
Breach Feb 1, 2018
Last update
Updated Feb 21, 2019
Source

What data was exposed?

Fields reported as compromised in this breach record.

Email addressesIP addressesPasswordsUsernames

Why does this breach matter?

In-depth analysis of the breach and its implications.

MyFitnessPal, a diet and exercise service, experienced a data breach on February 2018 that compromised 143,606,147 user records. The breach involved email addresses, usernames, IP addresses, and passwords, stored as either SHA-1 or bcrypt hashes depending on the account age. This data was later observed being sold on dark web marketplaces and circulated within cybercrime communities.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users' personal information, mainly authentication credentials and contact details, were at risk, potentially leading to identity theft or unauthorized account access.
Business Impact
MyFitnessPal faced reputation damage, user trust issues, and potential regulatory scrutiny.
Affected Sectors
  • Health and Fitness
  • Online Applications
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • •Change MyFitnessPal password immediately.
  • •Enable account security features such as two-factor authentication.
  • •Monitor your email account for suspicious activity.

Preventive Measures

  • •Use unique passwords for each account.
  • •Leverage password manager tools.
  • •Enhance account security with robust authentication measures.

Frequently Asked Questions

Common questions about this breach and what it means for you.

The breach exposed usernames, email addresses, IP addresses, and password hashes.

Attribution

Additional attribution provided with the breach record.

BenjaminBlue@exploit.im