Friday, November 1, 2024
HomeData BreachMassive MyHeritage Data Breach - 92 Million Users Sensitive Data Leaked

Massive MyHeritage Data Breach – 92 Million Users Sensitive Data Leaked

Published on

Malware protection

MyHeritage Announced its massive data breach that leaked around 93 Million registered users sensitive data.

MyHeritage is an online genealogy platform with a web, mobile, and software products and services that offer Online Family Tree, Census Records, Birth & Death Records, DNA Testing.

It holds the record of 3.0 Billion profiles, 96 Million users, 41 Million family trees where users can perform DNA and other tests to find their families.

- Advertisement - SIEM as a Service

Leaked files contain email addresses and hashed passwords of 92,283,889 users who had signed up to MyHeritage up to and including Oct 26, 2017.

This incident has been reported to MyHeritage Chief Security officer Omer Deutsch by a private security researcher that he had found a file named MyHeritage containing email addresses and hashed passwords, on a private server outside of MyHeritage.

Later on, MyHeritage security researcher analyze the files and confirmed that originated from MyHeritage.

An analyzed file contains all the email addresses of users who signed up to MyHeritage up to October 26, 2017, and their hashed passwords.

MyHeritage Data Breach – Leaked Data

Leaked files are completely legitimate and it contains email addresses and hashed passwords of 92,283,889 users who all are signed up the MyHeritage up to and including Oct 26, 2017.

Later on, MyHeritage hired an independent cybersecurity firm to conduct a forensic review of the breach system.

According to MyHeritage, “MyHeritage does not store user passwords, but rather a one-way hash of each password, in which the hash key differs for each customer,” and The security researcher reported that no other data related to MyHeritage was found on the private server.

No other information has been leaked in this data breach except Email Address and hashed passwords.

Also, the company said,  “Other types of sensitive data such as family trees and DNA data are stored by MyHeritage on segregated systems, separate from those that store the email addresses, and they include added layers of security.”

MyHeritage recommends users to change the passwords and they are expediting their work on the upcoming two-factor authentication feature and it will be available soon to all MyHeritage users.

Also Read:

3 Million Facebook Users Highly Sensitive Data Leaked by Personality App, called myPersonality in Last 4 Years

12,000 Social Media Famous Influencers Personal Data Leaked Online

123 Million American Households Sensitive Data Leaked Online – A Massive Data Leak

31 Million Data Leaked Online Reveal that keyboard App Collects Everything from Contacts to Keystrokes

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

LightSpy iOS Malware Enhanced with 28 New Destructive Plugins

The LightSpy threat actor exploited publicly available vulnerabilities and jailbreak kits to compromise iOS...

ATPC Cyber Forum to Focus on Next Generation Cybersecurity and Artificial Intelligence Issues

White House National Cyber Director, CEOs, Key Financial Services Companies, Congressional and Executive Branch...

New PySilon RAT Abusing Discord Platform to Maintain Persistence

Cybersecurity experts have identified a new Remote Access Trojan (RAT) named PySilon. This Trojan...

Konni APT Hackers Attacking Organizations with New Spear-Phishing Tactics

The notorious Konni Advanced Persistent Threat (APT) group has intensified its cyber assault on...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Grayscale Investments Data Breach Exposes 693K User Records Reportedly Affected

Grayscale Investments, a prominent crypto asset manager, has reportedly suffered a data breach affecting...

Northern Ireland Police to Pay £750,000 Fine Following Data Breach

The Police Service of Northern Ireland (PSNI) has been ordered to pay a £750,000...

Google Warns Of North Korean IT Workers Have Infiltrated The U.S. Workforce

North Korean IT workers, disguised as non-North Koreans, infiltrate various industries to generate revenue...