Sunday, November 24, 2024
HomeData BreachMassive MyHeritage Data Breach - 92 Million Users Sensitive Data Leaked

Massive MyHeritage Data Breach – 92 Million Users Sensitive Data Leaked

Published on

MyHeritage Announced its massive data breach that leaked around 93 Million registered users sensitive data.

MyHeritage is an online genealogy platform with a web, mobile, and software products and services that offer Online Family Tree, Census Records, Birth & Death Records, DNA Testing.

It holds the record of 3.0 Billion profiles, 96 Million users, 41 Million family trees where users can perform DNA and other tests to find their families.

- Advertisement - SIEM as a Service

Leaked files contain email addresses and hashed passwords of 92,283,889 users who had signed up to MyHeritage up to and including Oct 26, 2017.

This incident has been reported to MyHeritage Chief Security officer Omer Deutsch by a private security researcher that he had found a file named MyHeritage containing email addresses and hashed passwords, on a private server outside of MyHeritage.

Later on, MyHeritage security researcher analyze the files and confirmed that originated from MyHeritage.

An analyzed file contains all the email addresses of users who signed up to MyHeritage up to October 26, 2017, and their hashed passwords.

MyHeritage Data Breach – Leaked Data

Leaked files are completely legitimate and it contains email addresses and hashed passwords of 92,283,889 users who all are signed up the MyHeritage up to and including Oct 26, 2017.

Later on, MyHeritage hired an independent cybersecurity firm to conduct a forensic review of the breach system.

According to MyHeritage, “MyHeritage does not store user passwords, but rather a one-way hash of each password, in which the hash key differs for each customer,” and The security researcher reported that no other data related to MyHeritage was found on the private server.

No other information has been leaked in this data breach except Email Address and hashed passwords.

Also, the company said,  “Other types of sensitive data such as family trees and DNA data are stored by MyHeritage on segregated systems, separate from those that store the email addresses, and they include added layers of security.”

MyHeritage recommends users to change the passwords and they are expediting their work on the upcoming two-factor authentication feature and it will be available soon to all MyHeritage users.

Also Read:

3 Million Facebook Users Highly Sensitive Data Leaked by Personality App, called myPersonality in Last 4 Years

12,000 Social Media Famous Influencers Personal Data Leaked Online

123 Million American Households Sensitive Data Leaked Online – A Massive Data Leak

31 Million Data Leaked Online Reveal that keyboard App Collects Everything from Contacts to Keystrokes

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Nearest Neighbor Attacks: Russian APT Hack The Target By Exploiting Nearby Wi-Fi Networks

Recent research has revealed that a Russian advanced persistent threat (APT) group, tracked as...

240+ Domains Used By PhaaS Platform ONNX Seized by Microsoft

Microsoft's Digital Crimes Unit (DCU) has disrupted a significant phishing-as-a-service (PhaaS) operation run by...

Russian TAG-110 Hacked 60+ Users With HTML Loaded & Python Backdoor

The Russian threat group TAG-110, linked to BlueDelta (APT28), is actively targeting organizations in...

Earth Kasha Upgraded Their Arsenal With New Tactics To Attack Organizations

Earth Kasha, a threat actor linked to APT10, has expanded its targeting scope to...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Chinese Hackers Breached Deep Into US Telecom to Spy on Calls and Texts

In a breach that lawmakers are calling the most serious in U.S. history, Chinese...

Maxar Space Data Leak, Threat Actors Gain Unauthorized Access to the System

Maxar Space Systems, a leader in space technology and Earth intelligence solutions, has recently...

Amazon Confirms Employee Data Breach Via Third-party Vendor

Amazon has confirmed that sensitive employee data was exposed due to a breach at...