Recommended Free Tools
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Under Armour disclosed on March 29, 2018, that an unauthorized party had acquired data associated with approximately 150 million MyFitnessPal accounts. The company said the exposed information included usernames, email addresses and hashed passwords. This is a historical breach—not a new 2026 incident. If you reused your old MyFitnessPal password on another service, change it there too.
What happened, and when?
The incident involved MyFitnessPal, Under Armour’s food and nutrition app and website. According to the company’s March 29, 2018 SEC-filed announcement, unauthorized access occurred during February 2018. MyFitnessPal said it learned of the issue on March 25. Under Armour announced it publicly on March 29 and began notifying users by email and in-app message; CyberScoop published its report on March 30, 2018.
Under Armour estimated that approximately 150 million user accounts were affected. That is the company’s account estimate, not a verified count of 150 million distinct, active people. A later Under Armour annual filing continued to describe the early-2018 incident and its reported scale.
What information was exposed?
Under Armour identified usernames, email addresses and hashed passwords as the affected information. It said the majority of passwords were protected using bcrypt. The company said Social Security numbers, driver’s-license numbers and other government-issued identifiers were not involved; it also said payment-card information was collected and processed separately and was not affected.
#1 Best Overall
- No APP & Phone Required Fitness Tracker Watch: This Fitness Tracker watch doesn't require any App or smartphone connections! It's as simple to use as a regular watch but smarter. Perfect for anyone looking for an easy fitness tracker without the hassle of smartphone setups.
- Heart Rate and Sleep Monitoring: The Fitness Tracker monitors your heart rate automatically all day, and you can select manual mode through the App. The fitness Watch also monitors your sleep at night, providing a detailed analysis of your sleep quality (deep sleep, light sleep, awake time). It is a health advisor for women men in daily life.
- Multi Sport Modes with Activity Tracking: The fitness tracker features 9 sport modes like running, walking and more. Additionally, the activity tracker records daily steps, calories burned, walking distance and active time throughout the day. You can also set a daily steps goals through the App to track your progress.
- Smart Notification Reminder: You can get SMS messages, and SNS notifications directly on your wrist including Facebook, Twitter, Gmail ect. You won't miss any important calls and message and stay updated. Please note: the smart watch can not make calls or text.
- Long Battery Life and IP68 Waterproof: This smart watch only requires 2 hours of charging and can be used for 5-7 days continuously, IP68 waterproof rating can withstand daily sweat, washing hands and rainy day, allowing you to fully enjoy your workouts.
Those exclusions should be read as the company’s account of its investigation, not as proof that every other category of account-associated information was inaccessible. The public disclosure did not identify food logs, exercise records, body measurements or other fitness-profile content as exposed, but it does not support a categorical claim that all such data was safe.
What does “hashed password” mean?
A password hash is a transformed value used to verify a password without storing the password itself in readable form. Hashing is not the same as encryption: it is designed to be one-way. Bcrypt makes password guessing more computationally expensive, which can slow large-scale cracking, but it cannot guarantee that a stolen hash will never be cracked. MyFitnessPal’s security FAQ described bcrypt’s repeated computation and said the majority—not necessarily all—of the affected passwords used it.
Rank #2
- 【All-day Activity Tracker】: ENGERWALL IP68 Waterproof fitness tracker can record and track your daily steps, calories burned, exercise distance and time. It can also monitor your Body Temp, Heart Rate, Blood Oxygen and Blood Pressure. IP68 waterproof ensures that you don't need to take it off for daily hand washing and swimming, but don't soak it in water for a long time or wear it for hot baths, saunas.
- 【Slim and simple band design】The design concept of this tracker’s band is slim and unique, offering a comfortable and lightweight wearing experience. Suitable for men, women and the elderly.
- 【Heart Rate Monitor and Sleep Tracker】: Smart tracker can detect heart rate, blood pressure, blood oxygen, and body temperature in daily life. Monitor your sleep and analyze your sleep quality through Fall Sleep, Deep Sleep, Light Sleep, REM Sleep. You can view daily, weekly, and monthly data in the APP "Runmefit" to help you better understand your health status and lead a healthy lifestyle. [IMPORTANT] The blood pressure measurement feature must be downloaded and enabled within the app.
- 【Call and message notifications】: You can receive text messages and SNS notifications (including Facebook, Twitter, WhatsApp and Instagram) directly on your wrist. When your phone's Bluetooth is turned on, if you receive a message, the watch will vibrate to remind you and you can view the specific message. This function is very practical whether in work or life.
- 【Working Time】: Smart Fitness Watch is the best partner at work, you can set it on the mobile APP ‘Runmefit’: up to 5 sets of alarms, you don’t have to worry about being late for appointments or forgetting important things. You can set drinking Water Reminders and Sedentary Reminders to establish a healthy way of working.
Even a well-protected hash does not neutralize password reuse. If the same or a similar password was used for email, banking, shopping, social media or another service, someone with the exposed email address and password information may try those credentials elsewhere. The breach does not establish that any particular account was subsequently logged into.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWhat current and former users should do
- Change any reused or similar passwords. Update them on every service where you used the MyFitnessPal password or a close variation. Use a distinct password for each account; a password manager can generate and store unique ones.
- Secure your email account first if needed. Email is often the recovery route for other services. If you reused the password there, change it immediately, review recovery addresses and phone numbers, check for unfamiliar sessions or account changes, and turn on multifactor authentication.
- Change the MyFitnessPal password if you still use the account. Use the service’s official password-recovery process by navigating to the site or app yourself, rather than following links in old messages.
- Enable multifactor authentication on important accounts. Prioritize email, financial, shopping and social accounts where the option is available.
- Watch for suspicious activity and phishing. Be wary of unexpected password-reset messages, fake support requests, or emails invoking the old breach. Do not provide credentials through a message link; open the service directly.
The Federal Trade Commission’s breach guidance likewise advises changing the exposed password and reused passwords, updating security questions where relevant, and watching for phishing. A password reset protects an account going forward; it cannot retrieve information already copied or remove it from breach datasets.
Rank #3
![Apple Watch Series 11 [GPS 42mm] Smartwatch with Rose Gold Aluminum Case with Light Blush Sport Band - S/M. Sleep Score, Fitness Tracker, Health Monitoring, Always-On Display, Water Resistant](https://m.media-amazon.com/images/I/31caPPnRysL._SL160_.jpg)
- A FULL-FEATURED HEALTH TRACKER—Apple Watch Series 11 gives you invaluable insights about your body, right from your wrist. Take an ECG anytime* and get alerts for a high and low heart rate or an irregular rhythm*—so you can stay closer to your heart. You can also view your overnight health tracking metrics with the Vitals app* and be notified of possible sleep apnea.*
- KNOW YOUR SLEEP SCORE—With advanced sleep tracking, Series 11 gives you a daily sleep score. It’s an easy way to help measure and understand the quality of your sleep, so you can make it more restorative.
- GET HYPERTENSION NOTIFICATIONS—Did you know that Series 11 can spot signs of chronic high blood pressure? By analyzing how your blood vessels respond to beats of the heart, it can notify you of possible hypertension.*
- SAFETY FEATURES—A smartwatch that puts your safety first. Series 11 can detect a hard fall or severe car crash, automatically help connect you with emergency services, and notify your emergency contacts.* Check In can automatically notify a loved one when you’ve arrived at your destination.
- A POWERFUL FITNESS TRACKER—With advanced metrics and motivating features like Pacer, Heart Rate Zones, training load, and Workout Buddy powered by Apple Intelligence from your nearby iPhone*—Series 11 is made to help everyone stay active, from runners and hikers to strength-training enthusiasts.
If you deleted the app years ago, that does not by itself prove the account or its associated data was deleted. If you cannot recover the account, still replace any reused credentials and secure the associated email. A reputable breach-notification service can show whether an address appears in datasets it knows about, but no service has a complete record of every breach. A result that says “not found” is not proof that an address was never exposed.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Do you need a credit freeze?
A credit freeze can help prevent someone from opening new credit in your name, but it does not secure online accounts, prevent phishing or stop password-based account access. Because Under Armour said government identifiers and payment-card data were not involved in this breach, changing reused passwords, securing email and monitoring account activity are the more directly relevant first steps. A freeze or fraud alert may still make sense if other breaches exposed identity information or you have signs of identity theft. The FTC points consumers to IdentityTheft.gov for incident-specific guidance.
What remains unknown
MyFitnessPal’s contemporaneous FAQ said the company did not know the unauthorized party’s identity and that its investigation was ongoing. The available disclosure does not establish who was responsible, whether any particular user’s account was later misused, or that every kind of account-associated data was unaffected. Do not treat confirmation of the breach as proof of account takeover—or the company’s list of reported data as proof that no other information could have been accessed.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
