MyHeritage

In June 2018 MyHeritage disclosed that the email addresses and hashed passwords of every user who signed up before October 26, 2017 - about 92 million accounts - had turned up in a file on a private server, found by an outside security researcher. The company said family trees and DNA data sat on separate systems and there was no reason to believe they were accessed. Reports say the breached data later appeared for sale on the dark web in February 2019. The company is Israeli and has been owned by private-equity firm Francisco Partners since 2021 (reported $600 million).

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-10-16

Primary source. www.statnews.com/2018/06/05/genealogy-site-myheritage-says-92-million-user-accounts-compromised/ — Unverified - heuristic first draft.

Arbitration

Not verified this pass - terms fetch failed.

Data sharing

2018 breach: ~92M emails + hashed passwords exposed; DNA/family-tree data reported not affected. Policy says MyHeritage 'has never sold or licensed personal data' and will not sell genetic/health data without explicit consent; sharing exceptions include service providers, DNA/Smart Matches, legal requirements, consented research and acquisitions (Sec. 5). Data stored in U.S. data centers (Sec. 8); DNA samples kept at a U.S. lab up to 10 years only with prior approval (Sec. 9).

Contacts

Privacy contact. privacy@myheritage.com; DPO dpo@myheritage.com (Sec. 19)

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; otherwise the state registered agent is usually the only reliable route.

Mailing address. Not recorded.