Tuesday, April 8, 2025
HomeData BreachMassive MyHeritage Data Breach - 92 Million Users Sensitive Data Leaked

Massive MyHeritage Data Breach – 92 Million Users Sensitive Data Leaked

Published on

SIEM as a Service

Follow Us on Google News

MyHeritage Announced its massive data breach that leaked around 93 Million registered users sensitive data.

MyHeritage is an online genealogy platform with a web, mobile, and software products and services that offer Online Family Tree, Census Records, Birth & Death Records, DNA Testing.

It holds the record of 3.0 Billion profiles, 96 Million users, 41 Million family trees where users can perform DNA and other tests to find their families.

- Advertisement - Google News

Leaked files contain email addresses and hashed passwords of 92,283,889 users who had signed up to MyHeritage up to and including Oct 26, 2017.

This incident has been reported to MyHeritage Chief Security officer Omer Deutsch by a private security researcher that he had found a file named MyHeritage containing email addresses and hashed passwords, on a private server outside of MyHeritage.

Later on, MyHeritage security researcher analyze the files and confirmed that originated from MyHeritage.

An analyzed file contains all the email addresses of users who signed up to MyHeritage up to October 26, 2017, and their hashed passwords.

MyHeritage Data Breach – Leaked Data

Leaked files are completely legitimate and it contains email addresses and hashed passwords of 92,283,889 users who all are signed up the MyHeritage up to and including Oct 26, 2017.

Later on, MyHeritage hired an independent cybersecurity firm to conduct a forensic review of the breach system.

According to MyHeritage, “MyHeritage does not store user passwords, but rather a one-way hash of each password, in which the hash key differs for each customer,” and The security researcher reported that no other data related to MyHeritage was found on the private server.

No other information has been leaked in this data breach except Email Address and hashed passwords.

Also, the company said,  “Other types of sensitive data such as family trees and DNA data are stored by MyHeritage on segregated systems, separate from those that store the email addresses, and they include added layers of security.”

MyHeritage recommends users to change the passwords and they are expediting their work on the upcoming two-factor authentication feature and it will be available soon to all MyHeritage users.

Also Read:

3 Million Facebook Users Highly Sensitive Data Leaked by Personality App, called myPersonality in Last 4 Years

12,000 Social Media Famous Influencers Personal Data Leaked Online

123 Million American Households Sensitive Data Leaked Online – A Massive Data Leak

31 Million Data Leaked Online Reveal that keyboard App Collects Everything from Contacts to Keystrokes

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Threat Actor Leaks Data from Major Bulletproof Hosting Provider Medialand

A threat actor disclosed internal data from Medialand, a prominent bulletproof hosting (BPH) provider...

Morphing Meerkat: A PhaaS Utilizing DNS Reconnaissance to Generate Targeted Phishing Pages

Originally discovered in 2020 as a Phishing-as-a-Service (PhaaS) platform, Morphing Meerkat has since evolved...

Hackers Abuse Windows .RDP Files to Launch Unauthorized Remote Desktop Sessions

The Google Threat Intelligence Group (GTIG) has unearthed a novel phishing campaign leveraging Windows...

Linux 6.15-rc1 Released: Better Drivers, Faster Performance

The Linux kernel community has witnessed another milestone with the release of Linux 6.15-rc1,...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Kellogg’s Servers Breached, Hackers Steal Sensitive Data

WK Kellogg Co., one of the world's leading cereal and snack manufacturers, has fallen...

20-Year-Old Scattered Spider Hacker Pleads Guilty in Major Ransomware Case

A 20-year-old Noah Urban, a resident of Palm Coast, Florida, pleaded guilty to a...

State Bar of Texas Confirms Data Breach, Begins Notifying Affected Consumers

The State Bar of Texas has confirmed a data breach following the detection of...