Researchers Find 540 Million Facebook User Records on Exposed Servers :
Security researchers have found hundreds of millions of Facebook user records sitting on an inadvertently public storage server.
The two batches of user records were collected and exposed from two third-party companies, according to researchers at security firm UpGuard, who found the data.
In the researchers' write-up, Mexico-based digital media company Cultura Colectiva left more than 540 million records — including comments, likes, reactions, account names and more — stored on the Amazon S3 storage server without a password, allowing anyone to access the data. Another backup file on a separate storage server by defunct California-based app maker At The Pool contained even more sensitive data, including scraped information on more than 22,000 users, such as a user's friends lists, interests, photos, group memberships and check-ins.
According to UpGuard, neither company responded to requests to have the data removed. Facebook contacted Amazon to pull the data offline, a Facebook spokesperson told TechCrunch.
"Facebook's policies prohibit storing Facebook information in a public database," said the spokesperson. Facebook said there is no evidence yet to show the data has been misused but that it was investigating.
[...] "Storing personal information collected from end users is a liability," said [director of cyber risk research at UpGuard, Chris] Vickery. "The more you have, the greater that liability becomes."
At what point will we see Facebook actually take protection of user's info seriously?
(Score: 2) by black6host on Thursday April 04 2019, @08:11AM (1 child)
When it behooves them to do so, financially speaking.
So, the question becomes: What can we do to make that a reality.
(Score: 1, Interesting) by Anonymous Coward on Thursday April 04 2019, @08:33AM
Or when Congress fines the fuck out of them for violating their 2011 consent decree. That will not only get FB's attention, it will result in some long term, heavy handed governmental oversight.