It includes the email addresses and hashed passwords of the more than 92 million users who signed up for the platform up to October 26, 2017, which was the date of the breach, according to a statement from MyHeritage. The website now has 96 million users from around the world with 1.4 million of them who have taken the DNA test. Information in the file dated back to October 27 2017, so anyone who registered an account before that date could be affected. Because the passwords were hashed, the actual passwords weren't exposed - hackers only got access to a scrambled string of text compiled by crytogaphic algorithms.
MyHeritage said no other data was found on the server, and that there was no evidence of data in the file being used. Inside it were the millions of emails and hashed passwords. Hashing is a form of encryption that means a password is mathematically converted into a seemingly random series of characters.
The Israeli-based MyHeritage said the hash key differs for each customer password, suggesting they were salted and hashed, making it harder for cybercriminals to decode the 92 million individual coded passwords. It is unclear if the breach is the result of a hacker attack or because of a malicious employee selling the company's data. It also noted that it doesn't store credit card information, relying on third-party billing companies.
Apple's WWDC: Lots of new features, little talk of privacy
It also introduces a redesigned Mac App Store , which is inspired by iOS App Store's redesign, which was introduced with iOS 11 . Users also have the option to build their own quick actions, such as adding a watermark to a photo , and add it to Finder .
Mr Deutsch added: "Immediately upon receipt of the file, MyHeritage's Information Security Team analysed the file and began an investigation to determine how its contents were obtained and to identify any potential exploitation of the MyHeritage system".
He said: "We have no reason to believe that any other MyHeritage systems were compromised". Aside from informing users, MyHeritage stated it is taking steps to notify relevant authorities, as per GDPR.
The company recommended that all users change their passwords. And other sensitive information, such as DNA data and family trees, are stored separately from email addresses and have extra layers of security.
New Facebook privacy furore: What's at stake?
Apple , Microsoft , Samsung and Amazon were among the companies who signed up to data sharing agreements using the APIs. Zuckerberg was adamant before Congress that Facebook is seriously committed to users' privacy.
A full report will likely take a while; the company is planning to hire an external security firm to look into the breach, and is working on notifying relevant authorities under USA laws and GDPR, among others.
Two-factor authentication was already in development, but the team is "expediting" its rollout, so if you're a user, be sure to set that up as soon as it's available.
Death toll climbs from volcano's explosions of ash, molten rock in Guatemala
Another victim was found in the streets of El Rodeo by volunteer firefighters and later died in an ambulance. Sacatepezuez television published images of a charred landscape where the lava came into contact with homes.