Bitcoin Forum

this afternoon .. Myetherwallet wallet I have been in stolen the contents by hackers ..
and I lost the ETH, has anyone ever experienced a similar case to the one I'm currently experiencing?
and how to keep this from happening again? this is really annoying (hacker shit)

Well, there are a couple of different possibilities of what might have happened.

You might have logged into a phishing website and hackers acquired your login data that way.
Or you have malware on your PC, perhaps a keylogger or something else.

Never install any software if you're not sure that the source is safe.

nobody can possibly tell you how it happened unless they investigate your case thoroughly but it is a common thing to happen if you are using a web wallet instead of a proper desktop or better yet an offline storage. and also if you are not careful about what website you are visiting or what kind of malwares and keyloggers you have on your computer!

The hackers can get into your wallet in Myetherwallet because they knows your private key and with that private key they vcan stole your eth

MEW is easy to hack compared to other conventional wallets because two factor authentication can't be used with MEW. That's the glitch of their process. You need to extensively use your private key to access and send funds. There are lot of articles available in reddit with similar hacking stories. So it is advisable not to keep very high amounts in MEW.

Also stop using etherdelta exchange. You need to export your private keys to that exchange and your activities are monitored through browser cookies. That is the reason why decentralized exchanges are not able to gain popularity. Their security are worst.

Read the below article and choose your wallets carefully. If you have a licenced version of internet security package installed in your system, choose a desktop client.

https://tokenmarket.net/what-is/ethereum-token-wallets/

besides the trade loss, hackers are our main enemy too
they can look for the weaknesses of each server, which is on the computer .. and I just heard this time that Myetherwallet can be broken. it seems that the person doing this is really a genius
to minimize, should haunt a wallet that has been in retas, with a new wallet
and do not ever click on a link that you think is suspicious, hackers use all means to drain the contents of our wallets

Maybe you accidentally give your informations about your etherwallet that is why you have been hack. Don't be greed to the false advertisement that they will give you free btc or eth on the other sites. Be responsible on your actions to avoid being hacked. Take care next time.

i think you accidentally share your private key with someone. Another thing is you've visited a phishing website or your pc has a malware. Or you've use a pc that have a keylogger apps on it. Sometimes using a public network might be another reason, since that network is open. So please next time be extra  careful when sharing your info.

I think the most likely cause is you entered your private key into a phishing site that looks just like Myetherwallet. I've been taken to a phishing site for myetherwallet. It looked exactly the same but the url was wierd and had odd numbers in it. Always check the url and bookmark the site. Lucky I checked the url or my wallet would have been compromised.

If you use a hardware wallet such as Ledger Nano S you can use MyEtherWallet pretty safely. They link up together and you must physically interact with the ledger nano s to allow an outgoing TX to be performed.

Ffirst of all get the past..Very high two possibilities ;
You've malware on your pc, possibly a keylogger or something else.
Or you might have logged into a phishing website and hackers acquired your login data that way.
All I can tell you is it didn't happen via MyEtherWallet.com.

are you sure your wallet is hacked ? did you use another pc or laptop ?
dont you ever use another pc or laptop to login into a decentralized exchange, because they will need your private key.

This main difference if you use MyEtherWallet with or without a hardware wallet (Trezor, Ledger Nano S, etc...) is that if you use the hardware wallet, your private key won't leave the device, so nobody will be able to steal it and to steal your funds. This means you can use it more or less safely on a compromised computer. If you don't use hardware wallet, you need to input your private key somehow into the web page , so it gives the chance for the hackers to steal it. This is the reason that the Ledger Nano S is available with some months shipping time, because of the huge backlog of the orders...
I don't know what amount was stolen, but the 10% of the amount worths the price of the hardware wallet, that's good reason to buy one. It's similar than in the real life, when you want to secure your funds at home. You should buy a safe box to protect the funds or install an alarm system, etc... Rule of thumb in connection with the security: Spend the 10% of the saving to buy/install security solutions to be on the safe side...

Actually, the only hackers can do to access your myetherwallet is the phishing site they did. By doing this they can create replica of the home wallet similar to myetherwallet.com. To avoid always check myethewallet's link if it says MYETHERWALLET LLC [US] on the upper side of the page, It's like this screenshot

https://i.imgur.com/h3KyTCv.png

It is important to keep safe your private key. So if somebody gets your private key, he can easliy open your wallet. Because there is no 2F authentication. Some people give their private key by mistake instead of giving public key. I use MEW for a long time but I have never experienced such a thing.

Check your history and check the url used when you visited myetherwallet. Phishing scam probably.

There are many fakes of Myetherwallet, are you on one of the fake wallets that steal your money?

What is web wallet you are using?

I have been studying the issue of the security of the MyEtherWallet purse, all the time I am convinced that hackers can not crack the secret key of this wallet. Hacking this purse occurs, as a rule, through the fault of the users themselves. That is, or users go to similar websites (phishing sites), where they leave the data of their secret key, or in any other way, the data of the secret key becomes known to unauthorized people. In general, I think that this wallet is quite reliable and easy to use.

The most common attempt of hacking MEW is by phishing. Someone out of nowhere will mail you about your account was compromised or something similar and will give you a link of myetherwallet. If you click that link, it will redirect you to a website similar to MEW. If you logged in using your private key then say goodbye to your ETH and ERC-20 tokens.

Some uses airdrop as a tool. They will intentionally ask for your private key and public key. They will indicate that your private key will be safe and will just be used in verifying if you truly own the public key you provided.

To avoid this from happening again I have some tips for you:
1. NEVER give your private key to anyone. Even though they claim to be someone reputable or known developer of the ICO (or anything) you participated in.
2. NEVER click MEW links in your e-mails. Go to the real website, bookmark it and always use your bookmark.
3. Use Metamask for higher securities.
4. If you'll view your balance, use etherscan or ethplorer instead. Refrain yourself from using MEW just to check balance.
5. ALWAYS check the address bar while accessing your MEW. Check the spelling of the url and check if "MYETHERWALLET LLC [US]" is present. This will ensure you that you're on the right site.

Thank you for that great post.

One caveat is that you can use a hardware wallet on MEW without any hesitation.  The private keys are never transmitted or stored on cookies as the transaction goes through your ledger, trezor, or equivalent. 

The use of a hardware wallet on EtherDelta makes it very safe to use as well.  Decentralized exchanges are the future if proper precautions are put into place.  Zero fees sounds great to me.

Sorry buddy!!
you have to be careful of the sites you visit as some maybe fishing your Private keys! Beware of spam emails as well because that can get you at an unsafe website

Good information. Adding to this, I would suggest you to keep your private key confidentially. Always keep your private key in a paper wallet or take a printout of it and have it in your safe locker or something where you feel it is safe. Never open any links pertaining to gifting BTC or any kind of attractive offers provided in your email which asks for your private key.

I think you are exposed to phishing, because you are opening a site similar to myetherwallet. so I think you should bookmarks myetherwallet site to avoid phishing. I've experienced it and now my site bookmarks and my wallet safe to avoid hackers.

Sometimes when you log in to the wrong DNS, or a phising site you can get hacked. You should also be careful of the types of emails and links you open, or even the websites you visit. Hackers are everywhere so be vigilant

This happened also to me, other says the most probable reason is logging-in in a phishing site or you download a malware on your pc which was used by hackers or you might gave your private key to others or mistakenly put it in an Airdrop application, which is a very dumb thing if you really do it. But in my case, I really don't know what the reason was. I am very careful in surfing the net, in fact, I use the EtherAddress LookUp in opening MEW website, I haven't used my private key since I'm using JSON File to authenticate MEW. Actually, it was stored in an external HDD then after uploading I immediately remove it. In terms of a virus or malware, I'm 100% sure it's not the reason because I'm scanning my desktop weekly and my AntiVir is up to date.

You need to remember if what did you do before the hacking incident, do you click any suspicious link ? a phising website? double check your computer if it has a malware that cause being hack. Better to make new myetherwallet account or if you have enough money go purchase a hardware wallet.

check the url. Make sure its right website and not phising site. Scan your hardware using antivirus, maybe you got spyware or something.

Be more secure, make myetherwallet a bookmark to your computer so you won't mistype the site that might lead you to a phishing site.
Never expose your private key anywhere.
Don't install such apps that might harm your computer.
Be careful about joining airdrops. make sure you will not register there your main wallet.

1st mistake you did may be - have you filled any airdrop recently and there you have filled the private key during google docs.
Never fill your private key

2ns mistake - you have recently downloaded a file which is full of virus and it stopped all important files and send data to the hacker directly.
Install good antivirus

3rd check the url you are accessing it may be phishing site , there are lot of site during scan business , bookmark original myetherwallet always try to use Metamask google chrome extension

I am the victim of the same incident. You can not stop this because this is done by some MEW link person and this is regular practice. MEW can apply double layer security to MEW but after that MEW team could not do all that.
For more safety you can use JASON file to login and use etherscan.io to check you balance in MEW. Always use updated antivirus software. Do nor keep you ETH in the MEW wallet keep them on trading platform is more safe than mew.

well i got to learn about it ..the very day my friend mistakenly summited his private key and also enrolled into fake airdrop. 

MEW don’t store your wallet details. The most common cases of such hacks are due to phishing websites and virus in your computer. You have to track back which website you access to and do a complete scan on your computer.

There are phising websites that are same as that of the real myetherwallet. Some users without knowing it, mistakenly enter the data and try to log on to the account. In this way several hacks have taken place in the past. It's our responsibility to use the right one avoiding the scam attempts.

Myetherwallet is prone to Hacking and stealing of coins basically it is often caused by logging on to phishing sites similar  to MEW in fact there is a forum that is similar to bitcointalk in which an unsuspecting member will login his or her details in this phishing forum and possibly hacked, it is always advisable to bookmark MEW to avoid such a scenario.

Above everything that has been said and advised but most times we can't do without the MEW wallet for some campaign request for it to be paid into. I just like the idea of web wallet, whether we expose our keys or not, hackers would still want to find their way around it. Is sad :)

So what percentage is the most likely reason MEW accounts are hacked?  It seems like its mostly the person entering a fake site/phishing link right?  That is most likely number 1?  And the reason is most likely you google the site?  So when you click on it, does the actual site direct you to myetherwallet.com?  Or its something like myetherwa11et.com with different letters that look like it?


The other thing is has there been people who got their accounts hacked but never ever entered their seed into their MEW account?  And also those who never exposed their seed on their computer or online?  If so, how would that be possible?

That's blizzard I don't think that's even possible I checked online myetherwallet isn't actually a wallet it permits you to enter your private key so that you can view your wallet , maybe you have been caught up by many phishing site which look like myetherwallet but they actually scam you

chances are you've logged in on a computer that is owned by hackers so they are easier to break into our wallets. hackers are very clever in breaking etherwallet the level of security is less strong such as weak passwords and email or mobile phone number that is not connected with etherwallet. besides that we also have to merehasiakan private key etherwallet that we have, do not to know other people or our friend.

MEW has no 2FA security so the security of MEW is very weak. This is very common problem with MEW.
I start using new wallet Address on https://blockchain.io.
I think it is safer than MEW.

MEW doesn't need 2FA, It's security depends on your PC setup. If your PC is infected with Virus or has keylogger or you open a phishing site, You will LOSE your money.  Use a Hardware Wallet to protect your assets.

simply use Linux os .. to avoid malware into your computer...
there's script when you copying a text or it will change the address near to your etherium..
LINUX OS .. is the best of all.. ZERO CASUALTIES TO YOUR TOKENS just dont share your private key event your girlfriend.
private is a private.. logically

I also believe that there can be no reason other than a phishing site or keyloggers. MEW has established itself as a reliable wallet. the output is to install Linux on a separate computer, an apartheid purse or buy a detached teephone and use it only for storage.

As long as you have something of value, there's someone who wants to steal it. You need to be very careful because the money can not be recovered.

Check the domain name in your browser window. Clone website with almost similar domain name can steal your ether. Check the domain name letter by letter.

This post belongs to Altcoin section , you are talking about myetherwallet for better response move your post to Altcoin section.



kindly do not use thant link - original link is https://blockchain.info Both are similar links but difference is only the last word

maybe you've visited phishing site that has interface like myetherwallet ??? ... or maybe you've installed qt-wallet from a project, which where the program has a backdoor ??? ... my friend just hacked, because installing qt-wallet...

why hackers can get into Myetherwallet

You must, double-check the URL & SSL cert. It should say https://www.myetherwallet.com & MYETHERWALLET LLC in your URL bar and You should not click on suspicious links and are infected with phishing and do not download programs from anonymous sites You must save the secret key in external hard or usb drive Do not put important things in your device and keep them away, Be sure to protect your computer and always check it for viruses and install all updates for your Windows Finally, always check the URL before entering.

MyEtherwallet is very safe i haven't experience getting unauthorized access on my etherwallet. I think the reason why your Myetherwallet is compromise maybe you access a phishing sites or a fake myetherwallet site where your credentials was stolen. You should double check the URL always when you are trying to access a site.

I think you've been phished. You didn't checked the correct address of MEW when visiting their website? Cryptocurrencies' security (especially MEW) has a great and big loophole so it depends on the security of pc/laptop. Check your laptop/pc for a possible key logger. Since you're using MEW, take extra caution when visiting their site.

Until now I am still lucky compared to you, chances are there are some who take and steal our coin in myetherwallet always there.
but actually myetherwallet is very careful that no one can take, live depend on us who have a "private key" can store and maintain well or not.
probably the most frequent mistake so myetherwallet stolen because opening myetherwallet link from google not from bookmarks, because sometimes we do not realize myetherwallet link from google is trap.
there is no harm start to get used all the links that we often use for the bookmarks only.

Dont think if you use linux you in a safe position. This system uses the same browser mozilla. Hackers can use exploit for him.
Use dedicated pc for doing money operations

It's a bit of a misguided question and it is with proper security it is next to impossible to "Hack" into MyEtherWallet.

The most common reason people lose their Ethereum and ERC-20 tokens is that they have been phished, means you visited a dummy website instead of the real one or clicked on a fake link from an email or forum and arrived there by that route. Then if you enter your private key they capture it, so the real description of the problem is you gave away your private key not that you were hacked.

Take precautions like a very hard to crack password, Metamask, or a Ledger hardware wallet as an addition to MEW.

Be sure to secure your private key and save it in some hard drives. Also not enter your private key in any airdrops, because for sure that is the hacker. Also don't paste your private key in MEW when it is not secured because there is a big chance to get your private key and phishing all your tokens in your wallet. If you want to secure your wallet try to use a metamask, ledger, or a trezor so that your wallet will be secured.

I really don't know how that happened. Actually, I got hacked also in MEW. I created a new wallet for a campaign I joined. That is only new and I'm pretty sure I gave the ETH address. I never went or joined in a phishing site. So, when the bounty reward was added to my MEW, it was transferred to another wallet instantly. I really don't know how it happened and all I know I was fucked up.

i'm always suspicious to this etherdelta which is why its something that you should be avoiding. sending your private key is never a good thing as its just like a password being exposed to someone. if OP haven't login to etherdelta then a phiishing site must be the reason why someone got into your account and took your funds.

The most important thing to avoid such situation if you did not give your keys bymistake to anyone you should always bookmark the right website and open MEW from bookmark website. Do not always type the website address in address bar this can lead you to the phising website. So that hacker can access your details and take out your coins easily from your account and to avoid this always use private window or Incognito window to login to your myetherwallet and always use antivirus in your system.

On a personal perspective, exploring new horizons specifically on the emerging digital currencies i.e alt coins or cryptocurrencies brought multiple responses. On a positive note, these became the new medium of trading and/or other business transactions. On the other hand, based on your stand point that this became a medium to create crimes and eventually chaos and war amongst the supreme/superiors, I strongly disagree because being anonymous receiver/sender of alt coins also corresponds liability should you do any anomalies and distress amongst other people and I'm pretty sure the authorities have considered this also. I think its more of the timing, because nations became more powerful and their reasons of gaining these wealth and spread animosity is fighting for their rights and their people and use of cryptos and/or alt coins is not the reason. Am I making sense here?

People who reveal their private keys are mostly efforted in myetherwallet hack

First thing is you should not give your private keys to anyone. Further most important thing is you have book the site your web browser and always log in from that link only. There are variety of phishing myether wallet websites and you should be very careful when you log in. Never type the myether wallet address on address bar and it is most important to go from the already saved (book marked) link.

mew has many phishing websites which are similar to the original website. You could have come under the attack of the phishing website where you could have entered your private keys or you must have used them in a public computer where someone might have stolen your key. I have been using mew for past 1 year and I have been experiencing no issues with them as I store the keys very secretly or store them in a very safe place. You should only login in to the mew while you are transferring funds otherwise you must use only ethexplorer for checking the balance of your wallet. Login in to your account must be done very safely so that no one might see your keys. Use only ethexplorer for checking your balance.

Cryptocurrency Wallet MyAtherWallet (MEW) Cointelegraph is said to be rumors about it being hacked "FUD" and "a stupid falsehood."
Today, a personal message, on January 9, the Wallet Provider explicitly denies charging charges in social media that hackers have gained their DNS access, creating a phishing scam to collect login data.
Mews rumors have become a threat to the developers of Altcoin Ethereum Blue (BLUE) on Twitter, who have warned about the DNS compromise, not to use the MOU.

MEW is safe enough but in its use we must be careful against phishing and login using public wifi network. use trusted computers and networks and use uptodate antivirus. bookmark on your browser because if using google search on some user is directed to phishing site. make sure the site address is correct before you login.

This happens as many people put their private keys in place of their ethereum wallet in airdrops. If we save our private key and never share it to anyone in any circumstances then hackers cannot infiltrate in the account. Whenever we have to login, we have to check secure sign before site name if that is not there then we are going to login phishing site and our all details go to the hackers which we put there.

Since it can be accessed through the use of internet I guess that's how it works and/or maybe you've inputted your private key into a platform or medium wherein another user can have access. Just try to be more careful and always check whether the site you're visiting is legit.

There are some reason for hacking MEW otherwise it can not be hacked.

01. If anybody give privatekey at the time of bounty campaign join.
02. If any Malware affect any pc or mobile that it stolen private key.
03. If anybody save his/her private key in his mail that may hacked anytime.
04. If any of your friend seen your private key from your pc.
05. Finally form a exchanger where we using privatekey to sell and buy coins.

You have logged in to a phishing site. Because of which you have attacked the hackers. And you even forgot the address of an private key. So you're reading this problem. Private key computer is to be very carefully saved.

I've been experienced it before. My first time to sell my tokens, and I earn a lot, but I notice that my funds is being transferred to other address, I am shocked, and cannot do something about it. I have no idea what is happening. But then I realized i'd been hacked by hackers. The only thing I did is created other wallet and transferred my remaining tokens, and research how to avoid hackers.

I believe MEW is a secured website wallet so possible explanation to this is that you access a phishing site or someone has a physical access to your computer and stole your private keys. I've been using MEW for a long time and hasn't been experienced this once, be careful next time :)

Dont worry you are not the only one who do experienced such loss but hundred or even thousands of people do really have this kind of situation on where hackers did able to access their MEW wallet and stole the coins inside of it.It do really sucks specially when you lose thousands of dollars but the most common reason why someone do able to hack you out because you might get phished or any other forms that somebody did able to posses your private keys since these informations is mainly needed for someone to hack you out.

Hackers can't get in to myetherwallet. MEW users somehow made a mistake that's why there is hacker.  There is no hacker if they know what they are doing

I consider the ethereal purse MyEtherWallet one of the most reliable purses. Hackers can not crack the wallet key, because it consists of a set of numbers and letters that make up its code. Just need to pay due attention to safety when working with this purse. To do this, you need to look very carefully at the name of the site you are going in to not get into a fraudulent site that uses a similar name. It is better to use a bookmark or a separate application and go through them. To view the contents of the wallet it is better not to enter it, use the site etherscan. io, which is very convenient for this. If you still go into the wallet, it's better to use an honest key than a file key.

         MEW is  safe as long as you secured your password and private key and do not fall into a phishing sites. You alone can make your wealth secured from hackers. Just keep your private information of your wallet by your own. Don't share it to anybody and other word,don't trust to anyone.

You fail to bookmark the legit/right myetherwallet and landed on the wrong one because of that  your account was so the first you need to do now is bookmark the right myetherwallet and install the metamask extension, you only need to do this and you're good to go.

the main cause is when someone goes to an untrusted website and imports a wallet address via email or anything unsafe. so be careful not to get anything like this again

May be your computer is ratted with malware/keyloggers

Please don't download any shit coin wallets ,just because you are getting some free shitcoins in airdrops.They  may have keyloggers/miners/malware binded with them and have backdoor to your computer and steal away all your coins and info

- And guess what, the makers of MyEtherWallet, have rubbished claims about them getting hacked last month, calling the claims as stupid lies and FUD which no one should pay heed to.
- Its pretty bad to lose your portfolio, sorry for that.
- All i can help everybody with is this picture :
https://i2.wp.com/coinherald.co/wp-content/uploads/2018/01/MyEtherWallet-Popup.jpg

dont be confident because you think you have anti virus because hackers expertise can get into the latest anti virus..and mate is right always make sure not logging in to unsafe sites,and be aware of the presence of bad elements here in virtual world

Most of us experienced this I think, when I was still new here I keep on clicking spam emails maybe that's why I have been phished. Sad to say the thief got all of my tokens that have value and left me with shit coins. The ether also was drain out, I guess that's it for me. It's my fault for being ignorant :(.

it might be someone cliked on phising site and give his private key.
or maybe it might be DNS poison. (you can google it)
So make sure if you want to login at MEW, make sure the website address is correct or you can download the MEW plugin on chrome.
But it's better to store our tokens into offline wallet

It can happen if you can put their private keys in place of their ethereum wallet any where on social media or any where in airdrop.If you can't share your private key any body then any hacker cannot hack your account and you can also secure your operating system with antivirus it can protect you from phishing sites.

The only people who get their MEW hacked are those who somehow give away their private ETH key. This is comparable to losing your house key in front of your house or something like that. Of course if a thief see's that they are going to break in and steal your stuff! :P

When you say clicked on the spam email, did you ever input your key?  If not, then i assume it was a keylogger?  Or could malware do this for just clicking an email.  also when you say click spam email, you mean click on the actual link in the email?  Because if you open an email from an unknown person but dont click on any link, that is generally fine?

As far as I know MEW should not be hackable in itself, but the fact that you have to USE your private key again and again to access it makes it so that IF by any chance a hacker has got you in his traps, either phising or keylogger, then he'll steal your private key and access all what's in your MEW.
Get yourself a hardware wallet folks! You'll never regret to have been to cautious!

That's right, I am not saying that hacking is not bad; however, they are not to blame every time something like this happens, just like the different reasons stated above. Another one is through airdrop enrollments, I have a friend that enrollment in an airdrop that asks for wallet information only to find out the enrollment site is not a legit one, but is equipped with data recovery programs to get one's wallet information of some sort. Just like what happened to you, all his holdings in that wallet were also stolen. I guess, the best move here is to change your wallet and just be cautious in keeping it, no matter what.

Hackers are always targeting and trying their luck. You cannot say anything is fully hack-proof, you just have to do your best and be smart about things. Never giving any details out, signing in from machines that are not yours, storing in online wallets/exchanges only ... These are all bad traits.

The main reason why hackers can tap in your MyEtherwallet wallet, is because this wallet is website based and website based wallets are easy prey for hackers due to its non secure nature. And to prevent this kind of actions you should always checkbthe connection you are using, always check for the secure sign on the search bar to indicate that the connection you are using is really secure.

Because not all systems are protected as well as you would like. Entering the site there already the first paragraph, we are notified that no one is immune from attacks by fraudsters.

We need details. Maybe you went to a false phishing website? They are very similar and difficult to distinguish from the present.

In my opinion, sometimes when you enter the wrong DNS or you can get a hack. So you should be careful with the type of email or links you have open even the websites you visit. Hackers are everywhere so alert to provide security in your wallet. 8)

you certainly has have clicked links or pishing sites.
because nowadays hackers make every effort to reap the benefits of everyone, use everyting way.
my advice for the future you have to be careful
never click on a suspicious link, or participate with an airdrop requesting your private key.
it is obviously a scam.

This is not surprising. You need to keep their currencies in cold wallets, such as best wallet. My friend left his private keys in a confidential dialogue with himself in Telegram. And they stole $ 30,000 from his wallet. :-[

This has happened many times to many people using MEW.  You may have visited a phasing or cloned MEW page. It's better to download the full offline page of MEW at github so you can login offline,  or use Metamask extension and don't ever use your main wallet for etherdelta

I think maybe someone knew your private key or you enter a suspicious website that supposed not to visit. Next time beware of clicking any link you're not able to sure that its trusted and safe. Just double check the websites and make sure to keep your private keys well.

I hear all the time about different problems on such services like MyEtherwallet and Etherdelta. It is already a time to find some other places where it will be secure to provide and keep my Ethereum coins.

Myetherwallet is very strong wallet but it is possible due to our stupidity
Mostly it happens when some airdrops or sites ask us to write our private address in the form, then some people think that they are asking to write a private key and due to misunderstanding they write private key instead of ether or private address.
Second, it can be stolen when a person keeps his private key in his email or PC and if it is affected by any malware or hacked by someone.

This is only possible if you had been on some phishing site or you pc/laptop is having malware/keyloggers installed. Always avoid to download any app/programs from websites. Do encrypt your private key always. Read this Thread for the guide
https://bitcointalk.org/index.php?topic=3002655.msg30874759#msg30874759

It could be two reasons only - when you visit fishing site or give your private key (for example some suspicious airdrops require private key). Safety of wallet is in your hands only

Indeed right,  dont try to log in your wallet into another pc.  Either there was a key loggers or that pc already have a phishing site.  Knowing that you have that much of coins. Please becareful for that. Do not log in into untrusted site for your safety.

recently many people have lost their token in myrtherwallet by a hacker. So to secure your myetherwallet I suggest you to use metamask extension in google chrome.

They don't get their token taken through myetherwallet, they get phished by using sites similar to mew and their private key gets stolen.

Hackers can get into Myetherwallet when can they know the private key of wallet also when the know the password and the ethereum address of myetherwallet and you must don't give your private key to anyone because the only one can have and know this private key is you