Researchers at the cybersecurity business firm UpGuard on Wednesday say they had discovered the world of two datasets together stop the personal datum of hundreds of millions of Facebook users . Both were left publically approachable .
A 2nd leakage , UpGuard said , was tie in to a Facebook - integrated app call “ At the pool ” and had exposed about 22,000 passwords . “ The passwords are presumptively for the ‘ At the Pool ’ app rather than for the user ’s Facebook news report , but would put user at risk who have reused the same parole across story , ” the firm said . The database also hold data on drug user ’ friends , likes , groups , and locations where they had checked in , said UpGuard .
Both datasets were stored in unsecured Amazon S3 buckets and could be access by virtually anyone . Neither was password protected . The bucket have since been secured or take on offline .
Photo: (Getty)
“ The information set variegate in when they were last updated , the information full point present , and the number of unique individuals in each , ” UpGuard order . “ What ties them together is that they both stop data about Facebook exploiter , describing their pursuit , relationship , and interactions , that were uncommitted to third party developers . ”
Added Upguard : “ As Facebook faces examination over its information stewardship practices , they have made exploit to lose weight third party access . But as these exposures show , the data jinni can not be put back in the bottle . data point about Facebook exploiter has been spread far beyond the edge of what Facebook can control today . ”
Facebook did not at once respond to Gizmodo ’s request for comment .
This is a developing tarradiddle . Check back for update .
Update , 2:30pm : Facebook collapse the following statement :
“ Facebook ’s policy disallow stack away Facebook information in a public database . Once alarm to the issue , we work with Amazon to take down the database . We are attached to work with the developers on our platform to protect people ’s data . ”
Update , 3:40pm : tot text clarifying that the 22,000 passwords learn by UpGuard belong to Facebook users , but may not yield access to factual Facebook accounts . UpGuard reported that , “ presumably , ” the parole would grant access to the now - defunct app , though the researcher discourage it “ put users at risk who have reused the same password across accounts . ”
FacebookPrivacySecurity
Daily Newsletter
Get the best technical school , skill , and culture intelligence in your inbox daily .
News from the hereafter , delivered to your present .
You May Also Like
