Massive MyHeritage Data Breach – 92 Million Users Sensitive Data Leaked

MyHeritage Announced its massive data breach that leaked around 93 Million registered users sensitive data.

MyHeritage is an online genealogy platform with a web, mobile, and software products and services that offer Online Family Tree, Census Records, Birth & Death Records, DNA Testing.

It holds the record of 3.0 Billion profiles, 96 Million users, 41 Million family trees where users can perform DNA and other tests to find their families.

Leaked files contain email addresses and hashed passwords of 92,283,889 users who had signed up to MyHeritage up to and including Oct 26, 2017.

This incident has been reported to MyHeritage Chief Security officer Omer Deutsch by a private security researcher that he had found a file named MyHeritage containing email addresses and hashed passwords, on a private server outside of MyHeritage.

Later on, MyHeritage security researcher analyze the files and confirmed that originated from MyHeritage.

An analyzed file contains all the email addresses of users who signed up to MyHeritage up to October 26, 2017, and their hashed passwords.

MyHeritage Data Breach – Leaked Data

Leaked files are completely legitimate and it contains email addresses and hashed passwords of 92,283,889 users who all are signed up the MyHeritage up to and including Oct 26, 2017.

Later on, MyHeritage hired an independent cybersecurity firm to conduct a forensic review of the breach system.

According to MyHeritage, “MyHeritage does not store user passwords, but rather a one-way hash of each password, in which the hash key differs for each customer,” and The security researcher reported that no other data related to MyHeritage was found on the private server.

No other information has been leaked in this data breach except Email Address and hashed passwords.

Also, the company said, “Other types of sensitive data such as family trees and DNA data are stored by MyHeritage on segregated systems, separate from those that store the email addresses, and they include added layers of security.”

MyHeritage recommends users to change the passwords and they are expediting their work on the upcoming two-factor authentication feature and it will be available soon to all MyHeritage users.