Data breach
Myspace.com data breach
In 2008, Myspace.com suffered a data breach affecting 359,389,358 records. Exposed data included e-mail addresses, usernames and passwords.
Breach date
359.4 million
Records in the breach
3
Types of data exposed
Were you affected by the Myspace.com breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Myspace.com breach
- E-Mail Addresses
- Usernames
- Passwords
About the breach
The massive MySpace Data Breach exposed approximately 360 million user accounts. The breach occurred around July 2008 on the legacy platform (predating a June 11, 2013 site relaunch), but was only discovered and publicly disclosed in May 2016 when a hacker named "Peace" put the database up for sale on the dark web.
What Was Compromised
• User Data: ~358.7 million email addresses, usernames, and ~356.2 million passwords.
• Password Storage: Passwords were stored as unsalted SHA-1 hashes (specifically the first 10 characters converted to lowercase without a salt), making them vulnerable to cracking.
• Financial Data: No credit card or financial information was collected or exposed.
MySpace's Response
• Password Invalidation: MySpace automatically invalidated passwords for all affected accounts created before June 11, 2013.
• Security Measures: The platform added automated tools to detect and block suspicious activity and cooperated with law enforcement.
What Was Compromised
• User Data: ~358.7 million email addresses, usernames, and ~356.2 million passwords.
• Password Storage: Passwords were stored as unsalted SHA-1 hashes (specifically the first 10 characters converted to lowercase without a salt), making them vulnerable to cracking.
• Financial Data: No credit card or financial information was collected or exposed.
MySpace's Response
• Password Invalidation: MySpace automatically invalidated passwords for all affected accounts created before June 11, 2013.
• Security Measures: The platform added automated tools to detect and block suspicious activity and cooperated with law enforcement.
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Immediately change your password on the affected website, but also any other website where you may re-use this password.
2. Download the Google or Microsoft Authenticator App on your mobile device. Activate 2FA authentication on any website you use, which allow for it.
1. Immediately change your password on the affected website, but also any other website where you may re-use this password.
2. Download the Google or Microsoft Authenticator App on your mobile device. Activate 2FA authentication on any website you use, which allow for it.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.