{"id":88153,"date":"2018-03-30T15:10:04","date_gmt":"2018-03-30T22:10:04","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=88153"},"modified":"2025-08-13T01:58:54","modified_gmt":"2025-08-13T08:58:54","slug":"myfitnesspal-accounts-data-breach","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/privacy-identity-protection\/myfitnesspal-accounts-data-breach\/","title":{"rendered":"MyFitnessPal, Panera Bread, Saks Fifth Avenue: What to Know About the Recent Data Breaches"},"content":{"rendered":"

This blog has been updated as of 4\/4.<\/p>\n

Practically everything has become digitized in 2018. We\u2019ve developed thousands of health apps and gadgets to help monitor our fitness, implemented online ordering services for restaurants, the list goes on. And just this past week \u2013 two of these very innovations have been breached for customer data, as well as two traditional brick-and-mortar sites. MyFitnessPal<\/a>, Panera Bread, and Saks Fifth Avenue and Lord & Taylor have all been faced with data breaches, which have compromised millions of customers.<\/p>\n

Let\u2019s start with MyFitnessPal. Just last week, it was revealed<\/a> that 150 million accounts for the health app and site were breached. As of now, few details have emerged about how the attack happened or what the intention was behind it. While the breach did not compromise financial data, large troves of other personal information were affected. The impacted information included usernames, email addresses, and hashed passwords.<\/p>\n

MyFitnessPal, which is a subsidiary of Under Armour, has notified affected customers of the breach (see below), and Under Armour has released an official statement making the public aware of the attack as well.<\/p>\n

\"\"<\/p>\n

Then there\u2019s Panera Bread<\/a>. The popular food chain actually leaked customer data on their website in plain text. This data includes names, email addresses, home addresses, birth dates and final four credit card digits. It\u2019s not clear whether anyone malicious actually accessed any of this data yet, which was supplied by customers who had made online accounts for food delivery and other services. What\u2019s more \u2013 a security researcher first flagged this error to Panera Bread eight months ago, which did not acknowledge it until just now. And though the initial number of impacted users was said to be fewer than 10,000 customers, security reporter Brian Krebs estimates<\/a> that as many as 37 million Panera members may have been caught up in the breach.<\/p>\n

Finally there\u2019s Saks Fifth Avenue and Lord & Taylor<\/a>. A group of cybercriminals has obtained more than five million credit and debit card numbers from customers of the two high-end clothing stores. It appears this data was stolen using software that was implanted into the cash register systems at brick-and-mortar stores and siphoned card numbers.<\/p>\n

Security Tips<\/h2>\n

So, for the millions of affected MyFitnessPal, Panera Bread, and Saks and Lord & Taylor customers, the question is \u2013 what next? There are a few security steps these users should take immediately. Start by following these pointers below:<\/p>\n