MyFitnessPal

MyFitnessPal

Data Breach

myfitnesspal.com

107,189,762

Records Exposed

Feb 2018

Date of Breach

Database

Breach Type

Jul 2022

Added to Database

About This Breach

In February 2018, the diet and exercise service MyFitnessPal suffered a data breach. The incident exposed 144 million unique email addresses alongside usernames, IP addresses and passwords stored as SHA-1 and bcrypt hashes (the former for earlier accounts, the latter for newer accounts). In 2019, the data appeared listed for sale on a dark web marketplace (along with several other large breaches) and subsequently began circulating more broadly.

Compromised Data Types

Email Address Username IP Address Password Hash

Country

United States

Language

English

Password Storage

SHA1

Category

Health

Indexed On

Jul 25, 2022

Breach Type

Database

What Should You Do?

Get Full Breach Details with LeakedSource Pro

Sign up for a LeakedSource Pro account to see exactly what data was exposed in this breach and get real-time notifications when your information appears in new breaches.

Sign Up for Pro
  • Change your password immediately on MyFitnessPal and any other site where you used the same password. Use a unique, strong password for each account.
  • Watch for phishing emails targeting your inbox. Attackers may use your exposed email address to send convincing scam messages.
  • Enable two-factor authentication (2FA) on all important accounts to add an extra layer of security.
  • Use a password manager to generate and store unique, strong passwords for every account.

Were You Affected by This Breach?

Enter your email below to instantly check if your data was compromised in the MyFitnessPal breach and 12,000+ other known breaches.