Latest in Gear

Image credit: Bloomberg via Getty Images

MyHeritage admits 92 million user email addresses were leaked

Payment details, family trees and DNA data were not affected.
278 Shares
Share
Tweet
Share
Save

Sponsored Links

Bloomberg via Getty Images

MyHeritage is the latest company to suffer a security breach after a researcher found a file containing email addresses and hashed passwords for more than 92 million users. The researcher alerted MyHeritage to the breach Monday. The data includes account details for users who signed up to the genealogy and DNA testing service by October 26th last year.

In a blog post, MyHeritage said the email addresses seemed to be the only tangible data the hackers accessed. The company doesn't store users' actual passwords; it transforms them into a jumble of characters, and performs the same operation when you enter your password to see if it matches the stored data.

MyHeritage uses third-party payment companies like PayPal, so it doesn't store credit card details, and family tree and DNA data are stored in separate, more secure systems from the email addresses. The company noted there's no evidence the hackers used the breached data, nor does it believe any accounts were compromised as a result of the hack.

There's an investigation into how the hack happened and MyHeritage is taking measures to avoid a repeat incident. It's also accelerating work on two-factor authentication to make logins more secure. In the meantime, it's probably worth changing your MyHeritage password, and checking you have different passwords for every service you use. If the hackers here had data of yours from a different data breach, and the email addresses and passwords are identical, they could easily access your MyHeritage account.

Source: MyHeritage
All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
278 Shares
Share
Tweet
Share
Save

Popular on Engadget

Engadget’s guide to Home Entertainment

Engadget’s guide to Home Entertainment

View
Logitech unveils its first mouse and keyboard built for Chrome OS

Logitech unveils its first mouse and keyboard built for Chrome OS

View
'Control' will let you photograph its beautiful Brutalist setting

'Control' will let you photograph its beautiful Brutalist setting

View
Google's Daydream VR experiment is over

Google's Daydream VR experiment is over

View
Here's everything Google announced at the Pixel 4 event

Here's everything Google announced at the Pixel 4 event

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr