On Thursday, Under Armour Inc. announced that 150 million accounts from its subsidiary MyFitnessPal were compromised. The breach included user names, email addresses, and hashed passwords. (Hashing is a mathematical function that converts an original string of data into a seemingly random string of characters.) Driver’s license numbers and payment cards were allegedly not comprised. Under Armour has created a Frequently Asked Questions page to help consumers understand what happened.
According to Under Armour’s FAQ page, “On March 25, 2018, [they] became aware that during February of this year an unauthorized party acquired data associated with MyFitnessPal user accounts.”
Under Armour acknowledges that it “[does] not know the identity of the unauthorized party. Our investigation into this matter is ongoing.”
This is just the latest in a string of data breaches.
- AMERICAN EXPRESS AND ORBITZ THE LATEST COMPANIES TO EXPOSE CONSUMER DATA
- FACEBOOK AND CAMBRIDGE ANALYTICA: JUST ANOTHER DATA BREACH
Consumers should understand their rights. It is important to take steps to protect your identity. But be leery of just signing anything that Under Armour might send you offering to cover identity theft protection for a year. You may be giving away your right to protection for a longer period of time.
When in doubt, it is a good idea to contact a lawyer to discuss these matters before signing anything that gives away your rights.