MyFitnessPal
Disclosed Mar 29, 20188 years ago150,000,000 affectedConfirmed
MyFitnessPal breach affects about 150 million user accounts
Under Armour said an unauthorized party acquired MyFitnessPal account data in late February 2018, affecting about 150 million accounts; usernames, emails and hashed passwords were taken while payment card data was not affected.
What is known
| People affected | 150,000,000 (as reported by the organization) |
|---|---|
| Disclosed | Mar 29, 2018 |
| Discovered | Mar 25, 2018 |
| Happened | Feb 1, 2018 |
| Attack | Hacking |
| Data exposed | Emails, IP addresses, Passwords, Names |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: MyFitnessPalhaveibeenpwned.com · Aggregator | Aggregator |
| Under Armour Notifies MyFitnessPal Users of Data Security Issue (8-K Ex. 99.1)sec.gov · SEC filing | SEC filing |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Mar 29, 2018 | 150,000,000 |
| Have I Been Pwnedaccounts in the data | Feb 21, 2019 | 143,606,147 |
History of this record
- 2026-09-25 · source_type: aggregator to filing · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/MyFitnessPal to https://www.sec.gov/Archives/edgar/data/1336917/000133691718000012/exhibit991march292018.htm · seed source
- 2026-09-25 · status: disclosed to confirmed · seed source
- 2026-09-25 · verified_by: empty to research · seed source
- 2026-09-25 · verified: 0 to 1 · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · attack: unknown to hacking · seed source
- 2026-09-25 · data_types: ["emails","ip-addresses","passwords"] to ["emails","ip-addresses","passwords","names"] · seed source
- 2026-09-25 · records_basis: hibp to organization · seed source
- 2026-09-25 · records: 143606147 to 150000000 · seed source
- 2026-09-25 · disclosed: 2019-02-21 to 2018-03-29 · seed source
- 2026-09-25 · discovered: empty to 2018-03-25 · seed source
- 2026-09-25 · summary: In February 2018, the diet and exercise service MyFitnessPal suffered a data breach . The incident exposed 144 million unique email addresses alongside usernames, IP addresses and passwords stored as SHA-1 and bcrypt hashes (the former for to Under Armour said an unauthorized party acquired MyFitnessPal account data in late February 2018, affecting about 150 million accounts; usernames, emails and hashed passwords were taken while payment card data was not affected. · seed source
- 2026-09-25 · title: empty to MyFitnessPal breach affects about 150 million user accounts · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned), confirmed by Research. Record counts are as reported. Not legal advice.