
This includes user accounts affected by the breach, as well as the four million additional accounts added since October 26, 2017. The company says it is also expiring all user passwords on its site, a process that will take a few days.

Instructions are available on the company's help center. If you use MyHeritage, the company recommends that you change your password. That firm will help determine the scope of the intrusion and recommend steps to help prevent such incidents. MyHeritage reports it's further investigating the breach and engaging an independent cyber security company to assist. The company also says it doesn't store credit card information. The company notes that it stores information such as family trees and DNA data on segregated systems - separate from those that store the email addresses - that include added layers of security. MyHeritage said it has no reason to believe that the breach compromised any of its other systems. And MyHeritage says there's been no evidence that the perpetrators have used the data in the file. The security researcher reported finding no other data related to the company on the server where the file was found. MyHeritage said the information exposed involved users who had signed up for the service through October 26, 2017, the date of the breach. After analyzing the file, a MyHeritage security team determined that its contents originated from the company and included the email addresses and hashed passwords of 92,283,889 users. MyHeritage said a security researcher notified the company on June 4, 2018, of a file found on a private server outside of the company. That's the company's guidance following a data breach that exposed email addresses and encrypted passwords for more than 92 million users.

If you use MyHeritage for testing your DNA and tracking your ancestry, you may need to change your password.
