A hacker is offering information on more than 500 million Facebook users for free.
The exposed data includes personal information of over 533 million Facebook users from 106 countries, including over 32 million records on users in the US, 11 million on users in the UK, and 6 million on users in India. It includes their phone numbers, Facebook IDs, full names, locations, birthdates, bios, and – in some cases – email addresses.
Now, the entire dataset has been posted on the hacking forum for free, making it widely available to anyone
The database appears to be the same set of Facebook-linked telephone numbers that has been circulating in hacker circles since January and whose existence was first reported by tech publication Motherboard, according to Alon Gal, co-founder of Israeli cybercrime intelligence firm Hudson Rock.
Gal said on Saturday that he had verified the authenticity of at least some of the data by comparing it against phone numbers of people he knew.
Gal said that, from a security standpoint, there’s not much Facebook can do to help users affected by the breach since their data is already out in the open – but he added that Facebook could notify users so they could remain vigilant for possible phishing schemes or fraud using their personal data.
This is not the first time that a huge number of Facebook users’ phone numbers have been found exposed online. The vulnerability that was uncovered in 2019 allowed millions of people’s phone numbers to be scraped from Facebook’s servers in violation of its terms of service. Facebook said that vulnerability was patched in August 2019.
Facebook previously vowed to crack down on mass data-scraping after Cambridge Analytica scraped the data of 80 million users in violation of Facebook’s terms of service to target voters with political ads in the 2016 election.