Whether you’ve been “pwned” or not, security experts also recommend that you regularly change your passwords and use one unique password per site.The focus was solely on tracking calories, with limited fitness features.ĭuring Lee’s tenure, MyFitnessPal grew to 80 million active users. While the site doesn’t say where your data was leaked, it can tell you how many data dumps include your email address. One way to quickly check to see if your credentials have been breached is to enter your email address at. The other websites mentioned in The Register’s report are: Dubsmash, MyHeritage, ShareThis, HauteLook, Animoto, EyeEm, 8fit, Whitepages, Fotolog, 500px, Armor Games, BookMate, Artsy, and DataCamp. The email did not say how many users may have been exposed. A partial list of names and email addresses are believed to be the only information compromised. The passwords appear to be hashed and encrypted, however a buyer could cross-reference breached email addresses with previous hacks to see if someone reused a password.Īnother website included in the Valentine’s Day fire sale, the dating app Coffee Meets Bagel, sent users an email on Thursday to notify them that they learned of a breach on February 11, the same day The Register‘s report was published. While it doesn’t sound like hackers will be able to check on what MyFitnessPal users ate for breakfast, the leaked credentials could be a problem for people who reuse passwords across multiple websites. As a result, passwords previously used for MyFitnessPal at the time of the data security issue are no longer valid on MyFitnessPal, and we continue to encourage strong password practices including unique and complex passwords for all their accounts to enable users to further protect themselves,” she said. “We responded swiftly to alert users and have since required all MyFitnessPal users who had not changed their passwords since that Maannouncement, to reset their passwords.

The asking price: Less than $20,000 in Bitcoin, according to a report from The Register.Įrin Wendell, a spokesperson for MyFitnessPal, said users were required to change their passwords after the breach was reported last March, so any stolen credentials are no longer valid on the site. Not only is data from Under Armour’s MyFitnessPal, a diet and exercise community, being offered, but hackers also have their hands on credentials from 15 other websites.

Logo myfitnesspal