MyFitnessPal

Disclosed Mar 29, 2018150,000,000 affectedConfirmed

MyFitnessPal breach affects about 150 million user accounts

Under Armour said an unauthorized party acquired MyFitnessPal account data in late February 2018, affecting about 150 million accounts; usernames, emails and hashed passwords were taken while payment card data was not affected.

What is known

People affected	150,000,000 (as reported by the organization)
Disclosed	Mar 29, 2018
Discovered	Mar 25, 2018
Happened	Feb 1, 2018
Attack	Hacking
Data exposed	EmailsIP addressesPasswordsNames
Sector	Tech · US
Status	Confirmed
Check your email	Have I Been Pwned

Sources

Aggregatorhaveibeenpwned.com

Have I Been Pwned: MyFitnessPal

SEC filingsec.gov

Under Armour Notifies MyFitnessPal Users of Data Security Issue (8-K Ex. 99.1)

Notices filed

TotalMar 29, 2018

Research150,000,000 people

Accounts in the dataFeb 21, 2019

Have I Been Pwned143,606,147 people

History of this record

source_type2026-09-25

aggregator to filingby seedSource

source_url2026-09-25

https://haveibeenpwned.com/Breach/MyFitnessPal to https://www.sec.gov/Archives/edgar/data/1336917/000133691718000012/exhibit991march292018.htmby seedSource

status2026-09-25

disclosed to confirmedby seedSource

verified_by2026-09-25

empty to researchby seedSource

verified2026-09-25

0 to 1by seedSource

country2026-09-25

empty to USby seedSource

attack2026-09-25

unknown to hackingby seedSource

data_types2026-09-25

["emails","ip-addresses","passwords"] to ["emails","ip-addresses","passwords","names"]by seedSource

records_basis2026-09-25

hibp to organizationby seedSource

records2026-09-25

143606147 to 150000000by seedSource

disclosed2026-09-25

2019-02-21 to 2018-03-29by seedSource

discovered2026-09-25

empty to 2018-03-25by seedSource

summary2026-09-25

In February 2018, the diet and exercise service MyFitnessPal suffered a data breach . The incident exposed 144 million unique email addresses alongside usernames, IP addresses and passwords stored as SHA-1 and bcrypt hashes (the former for to Under Armour said an unauthorized party acquired MyFitnessPal account data in late February 2018, affecting about 150 million accounts; usernames, emails and hashed passwords were taken while payment card data was not affected.by seedSource

title2026-09-25

empty to MyFitnessPal breach affects about 150 million user accountsby seedSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Have I Been Pwned), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about MyFitnessPal