Data of 267 million Facebook users leaked online

Agencies
December 21, 2019

A database containing personal details of more than 267 million Facebook users was allegedly left exposed on the web, according to a report from Britain-based tech research firm Comparitech and security researcher Bob Diachenko.

Diachenko believes the trove of data -- including Facebook user IDs, phone numbers and names -- is most likely the result of an illegal scraping operation or Facebook API abuse by criminals in Vietnam.

"Scraping" is a term used to describe a process in which automated bots quickly sift through large numbers of web pages, copying data from each one into a database.

The information contained in the database could be used to conduct large-scale SMS spam and phishing campaigns, among other threats to end users, said the report on Thursday, adding that most of the affected users were from the US.

Facebook is reportedly investigating the issue.

"We are looking into this issue, but believe this is likely information obtained before changes we made in the past few years to better protect people's information," a Facebook spokesperson told Engadget.

The revelations come at a time when Facebook is trying to regain the trust of its users with protection of their data following the Cambridge Analytica scandal that badly hit its reputation.

More than one and a half years after the Cambridge Analytica scandal first became public, the US Federal Trade Commission (FTC) earlier this month said that the now-defunct British data analytics and consulting company engaged in deceptive practices to harvest personal information from tens of millions of Facebook users for voter profiling and targeting.

After discovering that personal details of 267 million Facebook users were exposed online, Diachenko notified the Internet service provider managing the IP address of the server so that access could be removed.

However, the data was also posted to a hacker forum as a download, said the security researcher.

Facebook IDs are unique, public numbers associated with specific accounts, which can be used to discern an account's username and other profile info.

While how criminals obtained the user IDs and phone numbers is not entirely clear, one possibility is that the data was stolen from Facebook's developer API before the company restricted access to phone numbers in 2018.

Facebook's API is used by app developers to add social context to their applications by accessing users' profiles, friends list, groups, photos and event data. Phone numbers were available to third-party developers prior to 2018.

Facebook's API could also have a security hole that would allow criminals to access user IDs and phone numbers even after access was restricted, Diachenko said.

Another possibility is that the data was stolen without using the Facebook API at all, and instead scraped from publicly visible profile pages, according to the report.

This isn't the first time such a database has been exposed. In September 2019, 419 million records across several databases were exposed, including phone numbers and Facebook IDs.

The report warned that Facebook users should be on the lookout for suspicious text messages.

Even if the sender knows your name or some basic information about you, be sceptical of any unsolicited messages, it added.

Comments

Helpful info. Lucky me I found your site by accident, and I'm stunned why this coincidence didn't happened in advance!
I bookmarked it.

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
May 15,2020

May 15: Global deaths linked to the novel coronavirus passed 300,000 on Thursday, while reported cases of the virus are approaching 4.5 million, according to a news agency tally.

About half of the fatalities have been reported by the United States, the United Kingdom and Italy.

The first death linked to the disease was reported on January 10 in Wuhan, China. It took 91 days for the death toll to pass 100,000 and a further 16 days to reach 200,000, according to the Reuters tally of official reports from governments. It took 19 days to go from 200,000 to 300,000 deaths.

By comparison, an estimated 400,000 people die annually from malaria, one of the world’s most deadly infectious diseases.

The United States had reported more than 85,000 deaths from the new coronavirus, while the United Kingdom and Italy have reported over 30,000 fatalities each.

While the current trajectory of COVID-19 falls far short of the 1918 Spanish flu, which infected an estimated 500 million people, killing at least 10% of patients, public health experts worry the available data is underplaying the true impact of the pandemic.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
July 4,2020

Geneva, Jul 4: The World Health Organization has updated its account of the early stages of the COVID crisis to say it was alerted by its own office in China, and not by China itself, to the first pneumonia cases in Wuhan.

The UN health body has been accused by US President Donald Trump of failing to provide the information needed to stem the pandemic and of being complacent towards Beijing, charges it denies.

On April 9, WHO published an initial timeline of its communications, partly in response to criticism of its early response to the outbreak that has now claimed more than 521,000 lives worldwide.

In that chronology, WHO had said only that the Wuhan municipal health commission in the province of Hubei had on December 31 reported cases of pneumonia. The UN health agency did not however specify who had notified it.

WHO director Tedros Adhanom Ghebreyesus told a press conference on April 20 the first report had come from China, without specifying whether the report had been sent by Chinese authorities or another source.

But a new chronology, published this week by the Geneva-based institution, offers a more detailed version of events.

It indicates that it was the WHO office in China that on December 31 notified its regional point of contact of a case of "viral pneumonia" after having found a declaration for the media on a Wuhan health commission website on the issue.

The same day, WHO's epidemic information service picked up another news report transmitted by the international epidemiological surveillance network ProMed -- based in the United States -- about the same group of cases of pneumonia from unknown causes in Wuhan.

After which, WHO asked the Chinese authorities on two occasions, on January 1 and January 2, for information about these cases, which they provided on January 3.

WHO emergencies director Michael Ryan told a press conference on Friday that countries have 24-48 hours to officially verify an event and provide the agency with additional information about the nature or cause of an event.

Ryan added that the Chinese authorities immediately contacted WHO's as soon as the agency asked to verify the report.

US President Donald Trump has announced that his country, the main financial contributor to WHO, will cut its bridges with the institution, which he accuses of being too close to China and of having poorly managed the pandemic.

The WHO denies any complacency toward China.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
May 24,2020

Beijing, May 24: The Chinese virology institute in the city where COVID-19 first emerged has three live strains of bat coronavirus on-site, but none match the new contagion wreaking chaos across the world, its director has said.

Scientists think COVID-19 -- which first emerged in Wuhan and has killed some 340,000 people worldwide -- originated in bats and could have been transmitted to people via another mammal.

But the director of the Wuhan Institute of Virology told state broadcaster CGTN that claims made by US President Donald Trump and others that the virus could have leaked from the facility were "pure fabrication".

"Now we have three strains of live viruses... But their highest similarity to SARS-CoV-2 only reaches 79.8 percent," she said, referring to the coronavirus strain that causes COVID-19.

US demands immediate start to WHO review

The United States called on the World Health Organisation on Friday to begin working immediately on investigating the source of the novel coronavirus, as well as its handling of the response to the pandemic.

One of their research teams, led by Professor Shi Zhengli, has been researching bat coronaviruses since 2004 and focused on the "source tracing of SARS", the strain behind another virus outbreak nearly two decades ago.

"We know that the whole genome of SARS-CoV-2 is only 80 percent similar to that of SARS. It's an obvious difference," she said.

"So, in Professor Shi's past research, they didn't pay attention to such viruses which are less similar to the SARS virus."

Conspiracy rumours that the biosafety lab was involved in the outbreak swirled online for months before Trump and US Secretary of State Mike Pompeo brought the theory into the mainstream by claiming that there is evidence the pathogen came from the institute.

The lab has said it received samples of the then-unknown virus on December 30, determined the viral genome sequence on January 2 and submitted information on the pathogen to the WHO on January 11.

Wang said in the interview that before it received samples in December, their team had never "encountered, researched or kept the virus."

"In fact, like everyone else, we didn't even know the virus existed," she said. "How could it have leaked from our lab when we never had it?"

The World Health Organization said Washington had offered no evidence to support the "speculative" claims.

In an interview with Scientific American, Shi said the SARS-CoV-2 genome sequence did not match any of the bat coronaviruses her laboratory had previously collected and studied.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.