What was reported
Around March 9, 2026, several security-focused outlets reported that a threat actor had posted a large data dump on a hacking forum, allegedly containing records from Cal AI users.
- Cybernews reportedthat the alleged dump contained around 3.2 million records, including names, dates of birth, emails, and logged meal data, and attributed the exposure to a reportedly misconfigured backend database.
- HackRead reportedsimilar figures and details, describing the incident as an alleged breach affecting Cal AI and referencing its recent acquisition by MyFitnessPal.
- TEISS reportedon the same alleged incident, again describing it as unconfirmed.
- SC World reportedthat over 3 million users were allegedly impacted, consistent with the other outlets' figures.
