Under Armour hit by data breach affecting 150M MyFitnessPal users

Posted: Updated:
EDISON -

Sports apparel merchant Under Armour has become the latest victim of a massive digital theft of sensitive information about tens of millions of customers.

The Baltimore company disclosed Thursday that an intruder grabbed the email addresses and login information during a February break-in affecting about 150 million users of its food and nutrition website, MyFitnessPal.

Under Armour says the hacker didn't obtain any payment information, Social Security numbers or driver's license numbers. That means this break-in is unlikely to require credit and debit cards to be replaced or raise the specter of identity theft, as happened with big breaches affecting retailer Target and credit reporting agency Equifax that resulted in the departures of their CEOs

Still, Under Armour says it is requiring all MyFitnessPal users to change their passwords.

Cybersecurity experts say that the passwords are important. Hackers with access to the passwords may be able to break into other accounts used by users. Experts say that users often use the same password for multiple sites.

Affected users may also start to see malicious emails that try to con the user out of their information.

“They'll take you to sites that look like real websites where you're asked to enter your credentials,” says Jeff Bernstein, a cybersecurity expert with Critical Defence.

Bernstein says the apps like MyFitnessPal are easy targets for hackers.

"For the simple reason because applications are where the data resides,” he says. “They've rushed these mobile apps out to the marketplace and haven't done the same due diligence with the mobile apps."

Affected users should change their passwords and also review any of their online accounts for suspicious activity. They should also be wary of any communications asking for personal information.

Bernstein says he expect regulators to come down hard on Under Armour when it comes to penalties. Under Armour says it's working with investigators to find out who did this.

The Associated Press wire services contributed to this report.

  • New Jersey SlideshowsSlideshowsMore>>

  • Duke and Duchess of Cambridge welcome baby boy

    Duke and Duchess of Cambridge welcome baby boy

    It's the third child for Kate and Prince William, and he's fifth in line to the British throne.

    It's the third child for Kate and Prince William, and he's fifth in line to the British throne.

  • Guide: National park sites in the tristate area

    Guide: National park sites in the tristate area

    Statue of LibertyStatue of Liberty

    A guide to the national park sites and trails on Long Island, Connecticut, New Jersey, New York City and the Hudson Valley.

    A guide to the national park sites and trails on Long Island, Connecticut, New Jersey, New York City and the Hudson Valley.

  • 2018 Summer Stadium Tours

    2018 Summer Stadium Tours

    Here are the artists who will be performing at tri-state stadiums this summer.

    Here are the artists who will be performing at tri-state stadiums this summer.

sorry to interrupt
your first 20 are free
Access to News 12 is free for Optimum, Comcast®, Spectrum Networks® and Service ElectricSM customers.
Please enjoy 20 complimentary views of articles, photos, and videos during the next 30 days.
you have reached your 20 view limit
Access to News 12 is free for Optimum, Comcast®, Spectrum Networks® and Service ElectricSM customers.
Please login or create an account to continue enjoying News12.
Our sign-up page is undergoing maintenance and is not currently available. However, you will be given direct access to news12.com while we complete our upgrade.
When we are back up and running you will be prompted at that time to complete your sign in. Until then, enjoy the local news, weather, traffic and more that's "as local as local news gets."