Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook does not plan to notify half-billion users affected by data leak

reuters.com

Post reply on HN
Print view View original

41–50 of 101 posts

Re: Facebook does not plan to notify half-billion users affected by data leak

#41

Post by nerbert »

t0mas88 wrote: post #38
Johnny555 wrote: post #32

Aren't they required to disclose this, at least to California residents, under California's data breach disclosure laws? Or was it not the type of PII covered under the law?

They are absolutely required to report this to the data protection agencies in all European countries. As the other comment mentioned, missing the 72 hour deadline on this is enough to get a fine as Booking.com did. I'm curious to see the total in GDPR fines from this for Facebook. Will probably take a year or two before we know.

At this point they must be like a deer in front of the flashlights, hoping the car will dodge them.

Re: Facebook does not plan to notify half-billion users affected by data leak

#42

Post by t0mas88 »

woudsma wrote: post #15

And they apparently also didn't plan on deleting my PII (phone number was in the leak), even after I permanently deleted my account at FB over 3 years ago. I thought I had the 'right to be forgotten' because of the GDPR, as I'm a European citizen. Has there been any real enforcement of these laws aside from the relatively small fine here and there? I've been blocking FB actively for the last few years, I can't even v…

If you're in Europe you can file a complaint with your local data protection agency. They will definitely already have some investigation on Facebook so this just adds more to it.

Re: Facebook does not plan to notify half-billion users affected by data leak

#43

Post by cdolan »

benja123 wrote: post #21

To be fair I don’t think I have ever been notified by any company when my data has been leaked and according to haveibeenpwned that has happened quite a few times. I am not a lawyer, but I find myself wondering if they are binded to GDPR in this case as judging from online articles the actual “leak” itself may have happened prior to May 2018. It also maybe that the nature of the PII itself is not such that it needs t…

I have been notified many times by reputable firms that my data has been taken, even if it was just a password.

Most of the stuff that I appear on havibeenpwned for is some strange data brokerage that probably grabbed my data from another hacked brokerage, etc

Re: Facebook does not plan to notify half-billion users affected by data leak

#44

Post by Cookingboy »

1-6 wrote: post #7
iso1631 wrote: post #4

Facebook today closed at a record high of 309, up from 299, on the first trading day after this leak hit the press. It has since increased to a higher record high (currently 312 with 10 minutes left)

Wall Street fueled by Jim Cramer's FAANG doesn't care about consumer privacy.

Because Wall Street realizes even consumers don't care about consumer privacy.

If Ashley Madison and Equifax walked away with barely a scratch from their catastrophic breaches, then this is almost nothing in comparison.

Re: Facebook does not plan to notify half-billion users affected by data leak

#45

Post by dmitrygr »

fshbbdssbbgdd wrote: post #8
1-6 wrote: post #5

Sometimes I wonder if the data from the cameras on my Oculus Quest 2 is being sent to FB's servers and kept. I guess I'll never know.

It’s going over your wifi, right? To start, you could evaluate whether the upload bandwidth could fit a video signal.

Better lower that bandwidth requirement estimate:

https://www.engadget.com/reddit-movie-floppy-disk-vcr-180230...

Re: Facebook does not plan to notify half-billion users affected by data leak

#46

Post by MattGaiser »

adamsvystun wrote: post #10

This is disappointing. Admitting the mistake is crucial in the process of fixing the problem. This just shows that they have learned little after all the company has been through.

Admitting the mistake, not admitting the mistake publicly.

Re: Facebook does not plan to notify half-billion users affected by data leak

#47

Post by woudsma »

aminozuur wrote: post #26
woudsma wrote: post #15

And they apparently also didn't plan on deleting my PII (phone number was in the leak), even after I permanently deleted my account at FB over 3 years ago. I thought I had the 'right to be forgotten' because of the GDPR, as I'm a European citizen. Has there been any real enforcement of these laws aside from the relatively small fine here and there? I've been blocking FB actively for the last few years, I can't even v…

The data was scraped years ago and just released now. Only the things you shared publicly already, such as your first and last name on Facebook, were "leaked", except for a few private phone numbers.

I've never had public profile information. Only visible for friends (and my phone number wasn't even visible there). How would my private phone number get into that dataset? That would suggest that they have more than just public data.

Re: Facebook does not plan to notify half-billion users affected by data leak

#48

Post by challengly »

t0mas88 wrote: post #38
Johnny555 wrote: post #32

Aren't they required to disclose this, at least to California residents, under California's data breach disclosure laws? Or was it not the type of PII covered under the law?

They are absolutely required to report this to the data protection agencies in all European countries. As the other comment mentioned, missing the 72 hour deadline on this is enough to get a fine as Booking.com did. I'm curious to see the total in GDPR fines from this for Facebook. Will probably take a year or two before we know.

GDPR is a gift to large corporations. Regulatory capture in return for a slap on the wrist. It also burdens startup competition and trains people to click "Allow Cookies" and "Accept the Terms of Service" as fast as possible.

Re: Facebook does not plan to notify half-billion users affected by data leak

#50

Post by bassdropvroom »

So after longing it out, today I had a look on haveibeenpwned, and it seems I am one of those whose data has leaked.

After re-reading all of the events of this breach, it seems that the exploit was fixed in Aug 2019 (as claimed by Facebook). I had deleted my account some 2 years prior to that.

Either these attackers have had access for over 2 years, or Facebook has not deleted my data, and likely everyone else's data either.

What can an individual, or perhaps everyone affected, do in this scenario?

Post reply on HN