Around last two weeks, it was said that 50 million Facebook accounts were hacked. But in recent statement released by Facebook, only 29 million accounts data was stolen and not 50 million. Facebook detailed the data that was stolen.
As estimated, initially the hackers stole access token for 30 million users, not 50 million. Of those 30 million users compromised, 15 million users had their basic contact information accessed like name, either email or phone number. 14 million accounts had their information including “username, gender, locale/language, relationship status, religion, hometown, self-reported current city, birthdate, device types used to access Facebook, education, work, the last 10 places they checked into or were tagged in, website, people or Pages they follow, and the 15 most recent searches”. While no information was accessed for the remaining one million accounts.
“We are cooperating with the FBI on this matter” said Guy Rosen, and Facebook also confirmed that the FBI is actively investigating the hack, but declined to give further details, saying the bureau had “FBI have asked us not to discuss who may be behind this attack” as its own investigation is on-going. Because of the nature of the “View As” bug, it is likely that Facebook has significant knowledge of the accounts where the attack originated, if not the perpetrators themselves. Disclosing anything about perpetrator now could cause them to cover tracks.
Facebook’s other apps including Messenger, Messenger Kids, Instagram, WhatsApp, Workplace, and Pages, as well as its features for payments, third-party apps, advertisers, and developers were not accessed. Facebook says that law enforcement has asked it not to discuss evidence regarding who committed the attack as the FBI continues its investigation. Said TechCrunch.
Facebook promised to notify all 30 million users and also other Facebook users through the Help Center to check the status of their account breach. Facebook said no data was taken from third-party apps accounts linked with Facebook including Messenger, Messenger Kids, Instagram, WhatsApp, Workplace, and Pages, as well as its features for payments, advertisers, and developers. There’s also no indication that the hackers posted any content while logged in.
