Smartphone Fitness App and Website

Disclaimer

We Leak Info did not take any part in breaching this website. Furthermore, we do not know the individual(s) who breached this website.

We Leak Info does not sell or trade databases. Please do not contact us about acquiring this data from us. We will ignore such requests.

We Leak Info does not give out information about our donors. We take the privacy of our users very seriously.

Journalists, researchers, news outlets, law enforcement, and alike can contact us through the methods listed below.

Anyone may use and cite any information on this page as long as proper credit is given to We Leak Info and a link is provided to the website.

Contact Methods:


Introduction

MyFitnessPal is a smartphone app and website that tracks diet and exercise. On March 29, 2018 MyFitnessPal publicly disclosed a data breach. However, this is the first time the data has ever been seen publicly.

The website was breached on February 2018, however it is unclear how the data was taken. This data breach affected 150,633,047 users.


What is We Leak Info?

We Leak Info is the world's fastest and largest data breach search engine. We help individuals secure themselves online by allowing them to verify if their password or email has been leaked. Unlike similar sites such as Have I Been Pwned, We Leak Info allows the user to view the raw results from the database.

We Leak Info is a freemium tool and provides free searches to everyone without registration. However, we require a small payment to view the raw results of a search. This goes towards maintaining expensive server fees and improving the service. Being the fastest data breach search engine on the market, each search takes a fraction of a milliseconds. We currently hold over 8 billion records.


Deleted Accounts

Out of the 150,633,047 accounts, we discovered that 77 accounts were deleted or disabled.


Hashes

The hashes were encrypted using SHA1 with salts. The version we received did not have the salts, however we have altered the database and filled in the salt column with the correct salt to enable decrypting of the hashes.

Most of the hashes can easily be decrypted through our hash API.


Emails

We found a total of 3,041,400 unique email domains. We have posted the top 20 email domains below.

Top 20 Email Domains:

  • Gmail.com: 54,484,392
  • Hotmail.com: 21,994,572
  • Yahoo.com: 20,597,605
  • Aol.com: 4,257,902
  • Hotmail.co.uk: 3,106,254
  • Icloud.com: 1,636,543
  • Comcast.net: 1,465,591
  • Live.com: 1,417,758
  • Outlook.com: 1,345,912
  • Mail.ru: 1,254,382
  • Qq.com: 1,240,247
  • Msn.com: 1,099,594
  • Yahoo.co.uk: 990,996
  • Web.de: 952,670
  • Me.com: 852,692
  • Gmx.de: 719,892
  • Googlemail.com: 714,389
  • Ymail.com: 697,996
  • Sbcglobal.net: 671,964
  • Hotmail.fr: 664,891

Conclusion

We hope by publishing the data and making it publicly available to everyone, it will help users to secure themselves.