What was exposed, when it happened, and which databases confirm it.
- accounts
- 277,673,244
- Breached
- February 1, 2018
- Last Update
- February 21, 2019
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
What happened
In February 2018, the diet and exercise service MyFitnessPal suffered a data breach. The incident exposed 144 million unique email addresses alongside usernames, IP addresses and passwords stored as SHA-1 and bcrypt hashes (the former for earlier accounts, the latter for newer accounts). In 2019, the data appeared listed for sale on a dark web marketplace (along with several other large breaches) and subsequently began circulating more broadly. The data was provided to HIBP by a source who requested it to be attributed to "[email protected]".
Compromised Info
- Email addresses
- IP addresses
- Passwords
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- Dehashed— linked via domain matching
- HIBP
FAQ
What was leaked in the MyFitnessPal breach?
The MyFitnessPal breach exposed: Email addresses, IP addresses, Passwords, and Usernames.
When did the MyFitnessPal breach happen?
The MyFitnessPal breach was disclosed on February 1, 2018 and affected 143,606,147 records.
Am I affected by the MyFitnessPal breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the MyFitnessPal leak.