533M Facebook users' phone numbers and personal data have been leaked online
businessinsider.com
533M Facebook users' phone numbers and personal data have been leaked online
1–10 of 524 posts
Re: 533M Facebook users' phone numbers and personal data have been leaked online
#2This does not look like scraping. A prima fascie database leak, and an invalidation of Facebook's claims of them not using your phone number past the validation, as well as them claiming using encryption at rest.
Re: 533M Facebook users' phone numbers and personal data have been leaked online
#3Does anyone know if there's a GDPR fine on its way?
Re: 533M Facebook users' phone numbers and personal data have been leaked online
#4These events are not a matter of if but when. And since the overwhelming majority of the people in my social circles has zero understanding of the real nature of the relationship between them - FB users and FB I just hope this will become increasingly frequent and painful experience for them. As in: I really hope this will get FB users in trouble as a result of identity theft etc.
This may sound extremely cynical but at this point it's the only way for the non-technical folk to understand the implications of giving away your privacy so that you can share cat pictures with other people.
Re: 533M Facebook users' phone numbers and personal data have been leaked online
#5I’ve been getting a lot of automated/unsolicited calls recently. Begs the question if this might be the source of my woes.
Is there a trustworthy phone number version of https://haveibeenpwned.com?
Re: 533M Facebook users' phone numbers and personal data have been leaked online
#6Does anyone know if there's a GDPR fine on its way?
Facebook already breaches the GDPR in many ways and has yet to see significant consequences, so this is unlikely.
(before you post a link to enforcementtracker.com please first compare the fine amounts with Facebook's revenue)
Re: 533M Facebook users' phone numbers and personal data have been leaked online
#7I’ve been getting a lot of automated/unsolicited calls recently. Begs the question if this might be the source of my woes. Is there a trustworthy phone number version of https://haveibeenpwned.com ?
Same here, i started recieving both calls and SMS which the last i find more annoying. I do use Android and these ones haven't been able to be detected as spam
Re: 533M Facebook users' phone numbers and personal data have been leaked online
#8This could be the first large breach we've seen from FB like this. Most past breaches were of a much different and smaller nature (scraping or API access abuse), and seeing a real leak like this could change the landscape for FB quite a bit, since historically companies like Facebook and Google have been very good with preventing them. I don't know a ton about FB's specifics, but there's a chance this data could be 'public' from people with the given privacy settings, if perhaps 25% of users have that turned on. If that is not the case though, then this would be the first serious breach from FB imo.
Either way at this point I operate under the expectation that most information I input into a database may be leaked at some point. This is particularly rough for services that demand and track a lot of things, but it cannot be helped.
Re: 533M Facebook users' phone numbers and personal data have been leaked online
#9Does anyone know if there's a GDPR fine on its way?
Facebook already breaches the GDPR in many ways and has yet to see significant consequences, so this is unlikely. (before you post a link to enforcementtracker.com please first compare the fine amounts with Facebook's revenue)
Great, so we get the worst of both worlds: outrageously obnoxious opt-out games (which, if skipped, implies free rein) and non-compliance as a cost of doing business. Wonderful.
Re: 533M Facebook users' phone numbers and personal data have been leaked online
#10This does not look like scraping. A prima fascie database leak, and an invalidation of Facebook's claims of them not using your phone number past the validation, as well as them claiming using encryption at rest.
As far as I can tell it's a combination of the 2020 phone number exploit linked to scraped data for public accounts (likely using the public id).