Data from 553 Million Facebook Accounts Leaked Online
Personal information belonging to more than 533 million Facebook users was found available on a cybercrime forum.
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltc94608acf452fd67/655cf371ab171e040a838b2a/329050_DR23_Graphics_Website_V5_Default_Image_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
The personal details of more than 533 million Facebook account holders from 106 countries have been made public on a cybercriminal forum.
This information is not newly stolen, reports indicate. It was scraped in 2019 when an attacker exploited a vulnerability in the platform to match random phone numbers with Facebook profiles, The Record reports. The company detected this activity and blocked the attacker's access.
"This is old data that was previously reported on in 2019," wrote Liz Bourgeois, Facebook's director of strategic response communications, in a tweet. "We found and fixed this issue in August 2019."
But while the data itself may be a couple of years old, it could prove relevant and handy to scammers who want to impersonate individuals or launch spear-phishing attacks, wrote Alon Gal, CTO and co-founder at security firm Hudson Rock, in a tweet discussing the massive data leak on April 3. The 553 million Facebook users affected make up about 20% of its total user base.
The leaked personal details include phone numbers, Facebook IDs, full names, location data, gender, birthdates, account creation dates, relationship status, and employer,s among other profile information. In some cases, the user's email address was also shared.
"Bad actors will certainly use the information for social engineering, scamming, hacking, and marketing," Gal wrote.
HaveIBeenPwned, a website that lets people check whether their personal information has been compromised in data breaches, notes the primary value of the leaked data is the link between phone numbers and identities. While each affected record included a phone number, only 2.5 million contained an email address.
Those curious to know whether they've been affected can enter their email into HaveIBeenPwned. Its creator, Troy Hunt, is considering whether to make phone numbers searchable as well.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024