Myspace hack may be the largest breach ever

Data center

I haven't logged into my Myspace account for over 10 years, but I did create it before June 11, 2013, which means my account login data - along with more 360 million other accounts - could be up for sale online.

The OG social network's parent company, Time, Inc., announced today that it was recently alerted to a hack that scooped up usernames, passwords and email addresses for accounts created before that June date.

It's important to make the chronological distinction because it's after then that Myspace migrated to a new, more secure platform.

Though Myspace didn't say how many accounts were compromised, LeakedSource.com, a paid hacker search engine, published a report that information for more than 360 million accounts was stolen. Because some of the accounts had a second password attached to it, the number of compromised passwords actually sits at over 427 million.

Myspace says a Russian hacker named "Peace" is responsible for the breach. Peace is also responsible for hacks on LinkedIn and Tumblr, and, according to Myspace, has claimed on LeakedSource that the Myspace data is from a past hack.

The sheer size of compromised accounts makes the Myspace hack possibly the largest data breach ever. For comparison, Peace's LinkedIn hack, which took place in 2012, saw emails and passwords for 117 million accounts end up for sale online. The Anthem hack of 2015 saw personal information for 78.8 million people stolen, while a US voter records data breach exposed the information of 191 million.

What Myspace is doing, and what you can do

Myspace is alerting affected users, so keep an eye out for a note from the service, even if you haven't used it in over a decade, like myself.

But also like myself, you may not use the same email address you used to set up your Myspace account (or even remember it), which poses a bit of a problem in this mitigation strategy.

Myspace has invalidated all passwords for compromised accounts that were created before June 11, 2013. If your information was stolen and you still use the service, you'll be prompted to authenticate your account and reset your password the next time you visit Myspace.

The site is also keeping an eye out for suspicious activity using automated tools, and law enforcement is involved in investigating and attempting to persecute the hacker.

One small relief is that no financial information was involved stolen; Myspace doesn't collect, use or store any credit card or other such info.

However, if you still use your old Myspace password for other accounts across the web, it's probably best to change those so your other accounts aren't at risk as well.

Michelle Fitzsimmons

Michelle was previously a news editor at TechRadar, leading consumer tech news and reviews. Michelle is now a Content Strategist at Facebook.  A versatile, highly effective content writer and skilled editor with a keen eye for detail, Michelle is a collaborative problem solver and covered everything from smartwatches and microprocessors to VR and self-driving cars.

Latest in Websites & Apps
Google Maps on a phone being held in someone's hand
Google Maps is getting two key upgrades, for easier route planning and quicker access to Gemini AI
Quordle on a smartphone held in a hand
Quordle hints and answers for Wednesday, March 26 (game #1157)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Wednesday, March 26 (game #388)
Quordle on a smartphone held in a hand
Quordle hints and answers for Tuesday, March 25 (game #1156)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Tuesday, March 25 (game #387)
Quordle on a smartphone held in a hand
Quordle hints and answers for Monday, March 24 (game #1155)
Latest in News
Xbox Series X and Xbox wireless controller set to a green background
Xbox Insiders are currently testing a new Game Hub feature that looks useful, but I've got mixed feelings about it
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Microsoft Surface Laptop and Surface Pro devices on a table.
Hate Windows 11’s search? Microsoft is fixing it with AI, and that almost makes me want to buy a Copilot+ PC
Oura Ring 4
Activity tracking on Oura Ring is about to get a whole lot better, but I've got bad news about your step count
Google Pixel Buds Pro 2
Cleaned your Pixel Buds Pro 2 recently? If not, you might be getting worse sound
Google Maps on a phone being held in someone's hand
Google Maps is getting two key upgrades, for easier route planning and quicker access to Gemini AI