Monday, April 28, 2025
HomeData BreachMassive MyHeritage Data Breach - 92 Million Users Sensitive Data Leaked

Massive MyHeritage Data Breach – 92 Million Users Sensitive Data Leaked

Published on

SIEM as a Service

Follow Us on Google News

MyHeritage Announced its massive data breach that leaked around 93 Million registered users sensitive data.

MyHeritage is an online genealogy platform with a web, mobile, and software products and services that offer Online Family Tree, Census Records, Birth & Death Records, DNA Testing.

It holds the record of 3.0 Billion profiles, 96 Million users, 41 Million family trees where users can perform DNA and other tests to find their families.

- Advertisement - Google News

Leaked files contain email addresses and hashed passwords of 92,283,889 users who had signed up to MyHeritage up to and including Oct 26, 2017.

This incident has been reported to MyHeritage Chief Security officer Omer Deutsch by a private security researcher that he had found a file named MyHeritage containing email addresses and hashed passwords, on a private server outside of MyHeritage.

Later on, MyHeritage security researcher analyze the files and confirmed that originated from MyHeritage.

An analyzed file contains all the email addresses of users who signed up to MyHeritage up to October 26, 2017, and their hashed passwords.

MyHeritage Data Breach – Leaked Data

Leaked files are completely legitimate and it contains email addresses and hashed passwords of 92,283,889 users who all are signed up the MyHeritage up to and including Oct 26, 2017.

Later on, MyHeritage hired an independent cybersecurity firm to conduct a forensic review of the breach system.

According to MyHeritage, “MyHeritage does not store user passwords, but rather a one-way hash of each password, in which the hash key differs for each customer,” and The security researcher reported that no other data related to MyHeritage was found on the private server.

No other information has been leaked in this data breach except Email Address and hashed passwords.

Also, the company said,  “Other types of sensitive data such as family trees and DNA data are stored by MyHeritage on segregated systems, separate from those that store the email addresses, and they include added layers of security.”

MyHeritage recommends users to change the passwords and they are expediting their work on the upcoming two-factor authentication feature and it will be available soon to all MyHeritage users.

Also Read:

3 Million Facebook Users Highly Sensitive Data Leaked by Personality App, called myPersonality in Last 4 Years

12,000 Social Media Famous Influencers Personal Data Leaked Online

123 Million American Households Sensitive Data Leaked Online – A Massive Data Leak

31 Million Data Leaked Online Reveal that keyboard App Collects Everything from Contacts to Keystrokes

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Cybercriminals Selling Sophisticated HiddenMiner Malware on Dark Web Forums

Cybercriminals have begun openly marketing a powerful new variant of the HiddenMiner malware on...

Three IXON VPN Client Vulnerabilities Let Attackers Escalate Privileges

Security researchers at Shelltrail have discovered three significant vulnerabilities in the IXON VPN client...

Cybersecurity Firm CEO Arrested for Planting Malware in Hospital Systems

Jeffrey Bowie, the CEO of a local cybersecurity firm, has been arrested for allegedly...

How To Use Digital Forensics To Strengthen Your Organization’s Cybersecurity Posture

Digital forensics has become a cornerstone of modern cybersecurity strategies, moving beyond its traditional...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Hackers Claim TikTok Breach, Leak Over 900,000 Usernames and Passwords

A hacker collective known as R00TK1T claims to have breached TikTok's user database, allegedly...

Blue Shield Exposed Health Data of 4.7 Million via Google Ads

Blue Shield of California has disclosed a significant data privacy incident affecting up to...

Hackers Exploit Stolen Certificates and Private Keys to Breach Organizations

Recent research has unveiled a concerning vulnerability within the realm of containerized applications, where...