[mothered]

Greetings to all,

MyHeritage, which Is a family tree & genealogy platform to create and discover family history, was compromised towards late last year but It only learned of the breach (and made public) today. The upside to their security, and as every other organization should have In place, Is that all passwords where not stored In plain text.

However given email addresses were also compromised In the breach, subsequent data loss and/or credentials exposed, may well be experienced with the online account(s) of which the email addresses are registered.

Email addresses and hashed passwords of more than 92 million MyHeritage users were exposed in a cybersecurity breach on October 26, 2017, the popular genealogy company reported Monday, June 4, 2018.

MyHeritage said that it only learned of the breach earlier that day—more than seven months after the fact—when an unidentified “security researcher” sent the company’s chief information security officer a message. The researcher said they had found a file containing users’ data on a private server and passed a copy of the file along.

The post went on to explain that the company does not store user passwords, only a one-way hash of each password, and the hash key, known as salt, differs for each user. Having a hashed password does not mean that the real password is revealed. Nevertheless, the company recommends that all users change their passwords “for maximum safety.”

Source.

[xyzo]

I find it disgusting that alot of companies dont know how to handle data breaches and simply thinking that sweeping it under the rug will make it go away.
They should learn from their mistakes - compensate anyone that got affected by this databreach and hire serious cyber security experts.

[mothered]

and hire serious cyber security experts.

Precisely.

Cyber security training for all personnel Is of utmost Importance, Inclusive of Identifying, establishing and prioritizing what's critical to the organization. Implementing threat and Intelligence monitoring and formulating a plan that will fend off any potential breach Is an absolute must.

[sashimi0]

Immediately went to change my password for the site. Upon login in, I was greeted by a message requiring me to set a new password. An email was sent to me to set a new password.
How does a major company not notice their security has been breached for so long?

[mothered]

How does a major company not notice their security has been breached for so long?

It's Improper and Immoral, but a lot of organizations keep It away from public knowledge, mainly for efficiency for business purposes.

That Is, they do not want any disruptions that may cause a negative Impact with losing clientele.

[junokyo]

Did you email the DataBase?

[mothered]

Did you email the DataBase?

Please elaborate.

[junokyo]

Did you email the DataBase?

oh! very good
Please elaborate.

[Mansispicher39]

MyHeritage breached for the first time ? What a surprise... There's already too much data exposed on the internet and I'm not sure if someone will need it soon.

[mothered]

There's already too much data exposed on the internet and I'm not sure if someone will need it soon.

The Issue with this, Is the nature of the data.

When you read "create your own online family tree" on It's website, you know that an array of personal Information Is at one's disposal, namely those who've compromised It.