Notice of Data Breach

#1

Post by uoflcards22 » Thu, Mar 29, 2018, 8:47 PM UTC

Notice of Data Breach
content.myfitnesspal.com

Re: Notice of Data Breach

#2

Post by antonkm » Thu, Mar 29, 2018, 9:10 PM UTC

This is how transparent an organization should be when breached. Kudos to Under Armour.

Re: Notice of Data Breach

#3

Post by tragic » Thu, Mar 29, 2018, 9:12 PM UTC

> The affected data did not include government-issued identifiers, such as Social Security numbers and driver’s license numbers, information that the app does not collect from users

Well, I suppose it wouldn't, would it? Is this supposed to be impressive?

How many more of these before serious legislation gets through?

Re: Notice of Data Breach

#4

Post by getsugablitz2 » Thu, Mar 29, 2018, 9:21 PM UTC

I use my Facebook as the login mechanism for MyFitnessPal, I wonder if that means my Facebook password has been stolen as well.

Better change it, sigh...

Re: Notice of Data Breach

#5

Post by theossuary » Thu, Mar 29, 2018, 9:21 PM UTC

tragic wrote: post #3

> The affected data did not include government-issued identifiers, such as Social Security numbers and driver’s license numbers, information that the app does not collect from users Well, I suppose it wouldn't, would it? Is this supposed to be impressive? How many more of these before serious legislation gets through?

Yeah, isn't that impressive, we weren't able to leak what we weren't given/didn't ask for. I wonder if they'll take that as a lesson. Probably not.

Re: Notice of Data Breach

#6

Post by ISL » Thu, Mar 29, 2018, 9:21 PM UTC

tragic wrote: post #3

> The affected data did not include government-issued identifiers, such as Social Security numbers and driver’s license numbers, information that the app does not collect from users Well, I suppose it wouldn't, would it? Is this supposed to be impressive? How many more of these before serious legislation gets through?

The article is likely to be repeating what was in a press release or statement from the company. It's there to bound above the impact of the breach.

Re: Notice of Data Breach

#7

Post by internobody » Thu, Mar 29, 2018, 9:23 PM UTC

Perhaps this will also prompt them to start using HTTPS as well?

Re: Notice of Data Breach

#8

Post by Jagat » Thu, Mar 29, 2018, 9:23 PM UTC

tragic wrote: post #3

> The affected data did not include government-issued identifiers, such as Social Security numbers and driver’s license numbers, information that the app does not collect from users Well, I suppose it wouldn't, would it? Is this supposed to be impressive? How many more of these before serious legislation gets through?

> It also doesn't include your mother's maiden name, nor does it include your browsing history, email dump, or your camera roll - information that the 'app does not collect from users'

/s

Re: Notice of Data Breach

#9

Post by JshWright » Thu, Mar 29, 2018, 9:24 PM UTC

getsugablitz2 wrote: post #4

I use my Facebook as the login mechanism for MyFitnessPal, I wonder if that means my Facebook password has been stolen as well. Better change it, sigh...

MyFitnessPal never had your Facebook password, so there's no way for it to be stolen by a breach.

Re: Notice of Data Breach

#10

Post by Jagat » Thu, Mar 29, 2018, 9:24 PM UTC

getsugablitz2 wrote: post #4

I use my Facebook as the login mechanism for MyFitnessPal, I wonder if that means my Facebook password has been stolen as well. Better change it, sigh...

No, but the auth token might have. Pretty sure facebook would have preemptively invalidated them all, but if not, you should login to your facebook account and unlink MyFitnessPal.