HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCriticalContained
MyHeritage
bd_edd95cdc5a37bd69 · schema v1 · pii pii-v1
Full breach record for MyHeritage →MyHeritage, Ltd. disclosed a data breach affecting approximately 92.6 million individuals. The incident involved unauthorized access to the company's cloud-based storage, resulting in the exfiltration of user data including names, email addresses, passwords, and for some users, IDs and photos. The breach was discovered in February 2018, and notifications were sent to affected individuals and the Delaware Attorney General in June 2018.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7da14bb6cb2c83ccCalifornia State AGfiled 2018-06-15Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2018/06/MyHeritage-Sample-Notice.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 15, 2018
- Raw hash
- 91792316f160e2ee2ffd2c3293b8fa1e82d928d8bb65a688f2b578f169b97328
Reporting entity
- Name
- MyHeritagenorm: myheritage
- Domain
- myheritage.com
Victim entity
- Name
- MyHeritagenorm: myheritage
- Domain
- myheritage.com
Incident
- Discovered
- Feb 16, 2018
- Materiality determined
- —
- Notification sent
- Jun 11, 2018
- Affected individuals
- 92,600,000
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Delaware Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.