Researcher Finds Credentials for 92 Million Users of DNA Testing Firm MyHeritage
Summary: MyHeritage, an Israeli genealogy and DNA testing company, disclosed that a security researcher found a file on the Internet containing the email addresses and hashed passwords of 92,283,889 users who created accounts up to and including Oct. 26, 2017, the date MyHeritage calls the breach. The company said DNA data is stored on separate systems, that each password hash uses a different key, and that it is expediting a two-factor authentication option; it later said it was expiring all user passwords, covering the 92.3 million affected accounts plus 4 million signed up after the breach date.
What you should know: The company's assurances rest on the strength of a hashing routine it did not name, and attackers who crack any of those 92 million passwords reach the more personal data behind them.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026