Under Armour became aware of the breach on 25 March and is currently working with leading data security companies to augment the investigation, and is also in close contact with law enforcement authorities. At this time, the app had 80m users but has since more than doubled in size. Under Armour subsidiary MyFitnessPal yesterday (29 March) shared that data from 150m accounts for the site and app was breached in February.Ĭlothing company Under Armour acquired MyFitnessPal, a website and mobile app for tracking activity and eating habits, in 2015. Under Armour started to notify users via email and in-app messages as soon as the breach was discovered, recommending them to change the password of their MyFitnessPal accounts, and also took necessary steps to study and contain the breach.Popular fitness and health tracking app MyFitnessPal is hit by hackers. Regarding the incident, the company has revealed that it was notified of the data breach on March 25, discovering that another firm has illegally acquired user data associated with their MyFitnessPal accounts in February this year. Under Armour has pointed that banking information and card data was not affected, as all transaction data is stored and processed separately from the MyFitnessPal app and website’s database.The company has also mentioned that no government-issued identification data was leaked, as Under Armour’s digital fitness tracking service does not collect sensitive personal data like Social Security Numbers and driver’s license numbers.

Moreover, a majority of the hashed passwords that were affected by the breach were encrypted by a password security tool called ‘bcrypt’. So it would be wise to change the passwords for any service where you may be using the same password as MyFitnessPal.

However, the firm revealed that usernames, email addresses, and hashed passwords were leaked in the breach, as per its investigation.

Under Armour is currently investigating the severity of the breach by partnering with leading security companies, and has assured that no critical or sensitive financial data was stolen during the breach.

Under armour myfitnesspal app