MyHeritage
Disclosed Jun 15, 20188 years ago91,991,358 accountsConfirmed
In October 2017, the genealogy website MyHeritage suffered a data breach . The incident was reported 7 months later after a security researcher discovered the data and contacted MyHeritage. In total, more than 92M customer records were exposed and included email addresses and salted SHA-1 password hashes. In 2019, the data appeared listed for sale on a dark web marketplace (along with several other large breaches) and subsequently began circulating more broadly.
What is known
| People affected | 91,991,358 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jun 15, 2018 |
| Happened | Oct 26, 2017 |
| Attack | Not stated |
| Data exposed | Names, Credentials and tokens, Emails, Passwords |
| Sector | Tech · US |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: MyHeritageoag.ca.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: MyHeritageattorneygeneral.delaware.gov · Official notice | Official notice |
| Have I Been Pwned: MyHeritagehaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jun 15, 2018 | |
| Delaware DOJresidents of DE | Jun 15, 2018 | |
| Have I Been Pwnedaccounts in the data | Feb 20, 2019 | 91,991,358 |
History of this record
- 2026-09-25 · hibp: empty to MyHeritage · backfill source
- 2026-09-25 · sector: other to tech · backfill source
- 2026-09-25 · data_types: ["names","credentials"] to ["names","credentials","emails","passwords"] · backfill source
- 2026-09-25 · records_basis: empty to hibp · backfill source
- 2026-09-25 · records: empty to 91991358 · backfill source
- 2026-09-25 · summary: empty to In October 2017, the genealogy website MyHeritage suffered a data breach . The incident was reported 7 months later after a security researcher discovered the data and contacted MyHeritage. In total, more than 92M customer records were expo · backfill source
- 2026-09-25 · data_types: [] to ["names","credentials"] · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.