Some victims 'not surprised' after yet another data breach affects 150 million users

Some victims 'not surprised' after yet another data breach affects 150 million users

RICHMOND, VA (WWBT) - Nearly 150 million people have had their data breached through a fitness tracker application and website.

Under Amour spokeswoman Kelley McCormick said Thursday the company's MyFitnessPal fitness and nutrition application was breached in late February.

"On March 25, the MyFitnessPal team became aware than an unauthorized party acquired data associated with MyFitnessPal user accounts in late February 2018," a statement reads.

Locally parks and trails were filled with people enjoying the warm outdoors, many of them sporting some form of fitness tracker.

"Another app, another security breach," said Jim McCullen, of Richmond. "I'm not surprised."

"I'm glad that I'm not one of their customers and that I'm not a part of that," said Danielle Florence, of Forest Hill.

McCormick said the company started notifying the MyFitnessPal community Thursday via email and through in-app messaging.

"I think my wife might [have the app]," McCullen said. "I'm not 100% sure. I need to check that when I get home."

McCullen doesn't use MyFitnessPal, but uses a different fitness tracker for his bike group, Coqui Cyclery.

He tries to stay on top of who has access to his personal information.

"I limit the apps I install and just a few select ones that I need," McCullen said.

Investigators said the affected information includes usernames, email addresses, and hashed passwords – the majority with the hashing function called bcrypt used to secure passwords.

Florence said she doesn't have any sort of fitness tracker because of situations like this one.

"I don't like people with my information, so I try to keep that very private," she said.

McCormick said the affected data breach did not include government-issued information including social security numbers and driver's license numbers because the company doesn't ask for that information. Payment card information was not affected either, because it's collected and processed separately.

"They just have to be more particular and careful about what they choose to install and what they choose to do on the web, because your data is always at risk unfortunately," McCullen said.

The company will require all MyFitnessPal users to change their passwords and urge them to do so immediately.

Copyright 2018 WWBT NBC12. All rights reserved.