• by Ray Schultz , March 30, 2018

Email addresses were among the data assets that were acquired in a massive data breach of MyFitnessPal that affected 150 million accounts, Under Armour, the company that runs the fitness apparel site, announced on Thursday.

An unauthorized party accessed the data in February, and the firm discovered the breach on March 25, it says.  

The exposed data also included user names and hashed passwords -- most using the hashing function called bcrypt, but not Social Security numbers and driver’s licenses, the firm adds 

Under Amour has notified customers through email and app messaging, urging them to immediately change their passwords, it says. The company adds that it is working with law enforcement.

In an information page, Under Armour states that its notification emails do not contain links, and urges users to not click through to any in emails that claim to be from the firm. 

In a separate development reported on Friday, AD said that up to 3.3 Dutch million email addresses and passwords are being offered by a hacker.