Data of 267 million Facebook users leaked online

Agencies
December 21, 2019

A database containing personal details of more than 267 million Facebook users was allegedly left exposed on the web, according to a report from Britain-based tech research firm Comparitech and security researcher Bob Diachenko.

Diachenko believes the trove of data -- including Facebook user IDs, phone numbers and names -- is most likely the result of an illegal scraping operation or Facebook API abuse by criminals in Vietnam.

"Scraping" is a term used to describe a process in which automated bots quickly sift through large numbers of web pages, copying data from each one into a database.

The information contained in the database could be used to conduct large-scale SMS spam and phishing campaigns, among other threats to end users, said the report on Thursday, adding that most of the affected users were from the US.

Facebook is reportedly investigating the issue.

"We are looking into this issue, but believe this is likely information obtained before changes we made in the past few years to better protect people's information," a Facebook spokesperson told Engadget.

The revelations come at a time when Facebook is trying to regain the trust of its users with protection of their data following the Cambridge Analytica scandal that badly hit its reputation.

More than one and a half years after the Cambridge Analytica scandal first became public, the US Federal Trade Commission (FTC) earlier this month said that the now-defunct British data analytics and consulting company engaged in deceptive practices to harvest personal information from tens of millions of Facebook users for voter profiling and targeting.

After discovering that personal details of 267 million Facebook users were exposed online, Diachenko notified the Internet service provider managing the IP address of the server so that access could be removed.

However, the data was also posted to a hacker forum as a download, said the security researcher.

Facebook IDs are unique, public numbers associated with specific accounts, which can be used to discern an account's username and other profile info.

While how criminals obtained the user IDs and phone numbers is not entirely clear, one possibility is that the data was stolen from Facebook's developer API before the company restricted access to phone numbers in 2018.

Facebook's API is used by app developers to add social context to their applications by accessing users' profiles, friends list, groups, photos and event data. Phone numbers were available to third-party developers prior to 2018.

Facebook's API could also have a security hole that would allow criminals to access user IDs and phone numbers even after access was restricted, Diachenko said.

Another possibility is that the data was stolen without using the Facebook API at all, and instead scraped from publicly visible profile pages, according to the report.

This isn't the first time such a database has been exposed. In September 2019, 419 million records across several databases were exposed, including phone numbers and Facebook IDs.

The report warned that Facebook users should be on the lookout for suspicious text messages.

Even if the sender knows your name or some basic information about you, be sceptical of any unsolicited messages, it added.

Comments

Helpful info. Lucky me I found your site by accident, and I'm stunned why this coincidence didn't happened in advance!
I bookmarked it.

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
July 23,2020

Minneapolis, Jul 23: The former Minneapolis police officer charged with murder in the death of George Floyd was charged Wednesday with multiple felony counts of tax evasion.

Derek Chauvin and his wife, Kellie May Chauvin, were each charged in Washington County with six counts of filing false or fraudulent tax returns for the tax years 2014 through 2019 and three counts of failing to file tax returns for 2016, 2017 and 2018.

Floyd, a Black man who was handcuffed, died May 25 after Chauvin, who is white, pressed his knee against Floyd's neck for nearly eight minutes as Floyd pleaded for air.

Chauvin is charged with second-degree murder, third-degree murder and manslaughter. He and three other officers who were at the scene were fired.

Chauvin is in custody on the charges in the Floyd case. Kellie Chauvin, who filed for divorce after Floyd's death, is not in custody.

Online court records didn't list attorneys for either in the tax evasion case, and calls to Kellie Chauvin did not go through.

Washington County Attorney Pete Orput said the investigation into the Chauvins was started in June by the Minnesota Department of Revenue and Oakdale Police Department.

Authorities allege in the criminal complaints that the Chauvins failed to file income tax returns and pay state income taxes, and that they underreported and underpaid taxes on income they earned from various jobs each year.

The complaints allege that they also failed to pay proper sales tax on a $100,000 BMW purchased in Minnesota in 2018.

Prosecutors say the Chauvins bought the car in Minnetonka but registered it in Florida, where they paid lower sales taxes.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 30,2020

New York, Jan 30: Three Indian citizens were arrested by border patrol agents here for entering the US illegally.

US Border Patrol agents stopped a vehicle near Massena in New York state along the county's northern border on January 24. During the vehicle checking, the agents found that two of the passengers were Indian citizens who entered the US illegally and not at a designated port of entry.

Both the passengers were transported to the Border Patrol Station for processing and charged.

The vehicle driver, also an Indian citizen who originally entered illegally into the US in 2012 and was ordered removed from the country in absentia last December, was charged with alien smuggling, a felony, which carries a penalty of a fine and up to five years of imprisonment for each violation.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
February 10,2020

Hubei, Feb 10: The death toll in the deadly coronavirus outbreak in China and other parts of the world has reached 904, CNN reported citing Chinese authorities on Monday.

The number of infected people globally has now hit the 40,000 mark.

According to the country's health officials, the number of people, who died from coronavirus in the Hubei Province, has risen to 871.

"As of 24:00 on February 9, Hubei Province reported a total of 29,631 cases of new coronavirus pneumonia, including 16,902 cases in Wuhan. 22,160 patients are still being treated in hospitals. 73,127 people remain under medical observation," read the statement from the Chinese Regional Health Committee.

The novel coronavirus was first detected in China's Wuhan city in late December and has since spread to more than 25 countries.

On Sunday, the new coronavirus even surpassed the fatalities caused by the SARS epidemic in 2003.

The World Health Organisation (WHO) has declared a global health emergency in the wake of the outbreak.

Meanwhile, WHO's international expert mission led by Dr Bruce Aylward embarked for China.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.