Under Armor Admits Huge Data Leak in MyFitnessPal App

Under Armor Admits Huge Data Leak in MyFitnessPal App

Under Armor has admitted that nearly 150 million users of the smartphone application "MyFitnessPal" were hacked.

Under Armor has admitted to a huge data leak in its smartphone application, "MyFitnessPal." The company says around 150 million users were hacked in February of this year.

The sports company stated that "an unauthorized party acquired data associated with MyFitnessPal user accounts" occurred in Feb. 2018 but it only became aware of the breach last week.

"The company quickly took steps to determine the nature and scope of the issue and to alert the MyFitnessPal community of the incident," a statement said.

The data includes usernames, passwords and email addresses, but did not reveal bank accounts, drivers license numbers or social security information.

"Four days after learning of the issue, the company began notifying the MyFitnessPal community via email and through in-app messaging," continued the statement. "The notice contains recommendations for MyFitnessPal users regarding account security steps they can take to help protect their information. The company will be requiring all MyFitnessPal users to change their passwords and is urging users to do so immediately."

"You might not think about the information you submit to fitness applications as sensitive, but if you're using the same password for other, more valuable applications, than the risk is really much more serious," Tim Erlin, VP, product management and strategy at Tripwire said. "Reusing passwords across multiple services and applications increased the risk of compromise."

This is the biggest data breach in 2018 so far, and Under Armor said it is "working with leading data security firms to assist in its investigation" as well as law enforcement authorities.  

The MyFitnessPal app lets users monitor their calorie intake and measure it against the amount of exercise they are doing. With a database of more than two million foods available to choose from.  

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.


Featured Cybersecurity


New Products

  • Camden Door Controls Application Spec Guide

    Camden Door Controls Application Spec Guide

    Camden Door Controls, an industry-leading provider of innovative, high quality door activation and locking products, has published a new application spec guide for specification writers designing a wireless barrier-free restroom control system. 3

  • ALTO Neoxx Electronic Padlock

    ALTO Neoxx Electronic Padlock

    Built to withstand all access control needs, the tough new SALTO Neoxx electronic padlock takes security beyond your expectations. 3

  • PDK IO Access Control Software

    PDK.IO Access Control Software

    ProdataKey now allows for "custom fields" within the interface of its pdk.io software. Custom fields increase PDK's solutions' overall functionality by allowing administrators to include a wide range of pertinent data associated with each user. 3