Data breach
MyFitnessPalmyfitnesspal.com
143 606 147 accounts exposed in a breach dated 2018-02-01.
Breached2018-02-01Added to HIBP2019-02-21 UTCUpdated by HIBP2019-02-21 UTCAccounts143 606 147Domainmyfitnesspal.com
Verified
What happened in Have I Been Pwned’s words
In February 2018, the diet and exercise service MyFitnessPal suffered a data breach. The incident exposed 144 million unique email addresses alongside usernames, IP addresses and passwords stored as SHA-1 and bcrypt hashes (the former for earlier accounts, the latter for newer accounts). In 2019, the data appeared listed for sale on a dark web marketplace (along with several other large breaches) and subsequently began circulating more broadly.
Exposed data as HIBP classifies it
- Email addresses
- IP addresses
- Passwords
- Usernames
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC