Chaps. My McAfee scan on my personal details has shown that my username /password has been leaked from my fitness pal. It’s also been leaked from JeFit which have spoken about before . Not sure if anyone is using those. MFP is owned by UnderArmour as is MapMyRun for example and they possibly share authentication systems.
So if you have passwords for those sites that you use on other sites you need to go and change those. Of course change your MFP password also.
MFP also has terrible terms that basically allows them to sell all your data. I think there was a thread here about alternatives to MFP when the terms were updated.