{"id":219695,"date":"2021-04-05T18:17:35","date_gmt":"2021-04-05T15:17:35","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/personal-data-of-533-million-facebook-users-stolen-by-hackers-review-geek\/"},"modified":"2021-04-05T18:17:35","modified_gmt":"2021-04-05T15:17:35","slug":"personal-data-of-533-million-facebook-users-stolen-by-hackers-review-geek","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/personal-data-of-533-million-facebook-users-stolen-by-hackers-review-geek\/","title":{"rendered":"#Personal Data of 533 Million Facebook Users Stolen by Hackers \u2013 Review Geek"},"content":{"rendered":"

“#Personal Data of 533 Million Facebook<\/a> Users Stolen by Hackers \u2013 Review Geek”<\/strong><\/p>\n

\n
\"A
Pixinoo\/Shutterstock<\/a><\/span><\/figcaption><\/figure>\n

If you\u2019re on Facebook (and who isn\u2019t?), you may want to consider locking down all your accounts. A security researcher discovered the personal data of 533 million Facebook users<\/a> leaked online in a hacker forum. The data includes phone numbers, names, birthdates, emails, and more.<\/span><\/p>\n

The data in question first leaked back in January, but at the time, hackers had to pay for it through a Telegram bot. That limited the spread somewhat between the cost and the method to retrieve it. But over the weekend, security researcher Alon Gal<\/a> discovered the data posted on a hacker forum for free.<\/span><\/p>\n

\n

All 533,000,000 Facebook records were just leaked for free.<\/p>\n

This means that if you have a Facebook account, it is extremely likely the phone number used for the account was leaked.<\/p>\n

I have yet to see Facebook acknowledging this absolute negligence of your data. https:\/\/t.co\/ysGCPZm5U3<\/a> pic.twitter.com\/nM0Fu4GDY8<\/a><\/p>\n

\u2014 Alon Gal (Under the Breach) (@UnderTheBreach) April 3, 2021<\/a><\/p>\n<\/blockquote>\n

The breach contains information on users across 106 countries, including 32 million US users and 11 million UK users. Troy Hunt, of\u00a0<\/span>haveibeenpwned<\/span><\/a>, already has a copy of the data, and in his analysis, few records<\/a> (about 0.5%) contain email addresses. But far more contain phone numbers, birthdates, and other personally identifying information. Everything you might need to pull off a sim swapp<\/a>ing attack or take over an account.<\/span><\/p>\n

\n

Email parsing now done, found 2,529,621 unique addresses across the 108 files. Call it about 0.5% of all records having an email address.<\/p>\n

\u2014 Troy Hunt (@troyhunt) April 4, 2021<\/a><\/p>\n<\/blockquote>\n

For his part, Hunt is considering adding a new field<\/a> to\u00a0<\/span>haveibeenpwned.com<\/span><\/a>\u00a0for phone numbers. Currently, you can only your data against email addresses for breaches, but in this case, that\u2019s not very useful. But adding a phone number field comes with risks, so Hunt is still deciding as of this publication.<\/span><\/p>\n

In a statement to Bleeping Computer<\/a>, Facebook stated that hackers stole the data using a vulnerability the company patched in late 2019. That means the data stolen is nearly two years old, and if you\u2019ve changed your email address or phone numbers since then, what the hackers have is out of date. But other data doesn\u2019t change of course, (like birthdates), and people usually keep phone numbers and emails for many years, so the age of the data is of little comfort.<\/span><\/p>\n

For its part, Facebook doesn\u2019t seem to be notifying affected users, which would be a helpful move. If you want to determine if you\u2019re part of the leak, you can start with\u00a0<\/span>haveibeenpwned<\/span><\/a>. For now, that\u2019s an email-only option, but hopefully, Hunt does add a phone number field in the future.<\/span><\/p>\n

via Bleeping Computer<\/a><\/small>\n<\/div>\n