SAN FRANCISCO – Facebook yesterday said hackers “scraped” the personal data of some half a billion users in 2019 by taking advantage of a feature designed to help people easily find friends using contact lists.
A trove of information on more than 530 million users was shared over the weekend on a hacker forum, prompting the leading social network to explain what happened and call on people to be vigilant about privacy settings.
“It is important to understand that malicious actors obtained this data not through hacking our systems, but by scraping it from our platform prior to September 2019,” said Facebook product management director Mike Clark in a post.
“This is another example of the ongoing, adversarial relationship technology companies have with fraudsters who intentionally break platform policies to scrape internet services.”
The data includes phone numbers, birth dates and email addresses, and some of the information appears to be current, according to United States media reports.
The stolen data does not include passwords or financial data, according to Facebook.
Scraping is a tactic that involves using automated software to gather information shared publicly online.
“All 533,000,000 Facebook records were just leaked for free,” Alon Gal, chief technology officer at the Hudson Rock cybercrime intelligence firm, tweeted on Saturday.
He denounced what he called the “absolute negligence” of Facebook.
“Bad actors will certainly use the information for social engineering, scamming, hacking and marketing.”
Clark urged members of the social network to check their privacy settings to control what information can be seen publicly, and to tighten account security with two-factor authentication.
This is not the first time that a leak or use of data from the world's largest social network – with nearly two billion users – has embroiled Facebook in controversy.
In 2016, a scandal around Cambridge Analytica, a British consulting firm that used the personal data of millions of Facebook users to target political ads, cast a shadow over the platform and its handling of private information. – AFP, April 7, 2021
