Facebook: 30 Million Account Tokens Stolen, Not 50 Million

Facebook: 30 One thousand thousand Account Tokens Stolen, Not fifty 1000000

That'due south great, only 14 million people still had a ton of data stolen, including device types used to access Facebook, education, the last 10 places they checked into or were tagged in, people or Pages they follow, and the 15 almost contempo searches accessed.

Facebook on Friday provided an update on a recent alienation to say that thirty million people had their Facebook admission tokens stolen rather than the previously announced 50 million.

Tokens are digital keys that keep yous logged in to Facebook so you lot don't have to re-enter your countersign every time you open the app. With an access token, an aggressor could take over your account and employ it as if they were you.

But while Facebook was able to lower the number of people affected, that's cold comfort for the remaining 30 million. Of that total, 1 million people did non take whatever information accessed, while 15 million people had their name and contact details (phone number, email, or both, depending on what people had on their profiles) accessed.

The state of affairs is worse for the remaining 14 million users; they had their name and contact details exposed, as well every bit username, gender, locale/linguistic communication, relationship condition, religion, hometown, self-reported electric current city, birthdate, device types used to access Facebook, education, work, the last 10 places they checked into or were tagged in, website, people or Pages they follow, and the 15 nearly recent searches accessed.

Facebook will notify the thirty million people affected with customized messages to tell them exactly what the attackers accessed from their accounts. Or you can click this link while signed into Facebook and whorl down.

"This attack did not include Messenger, Messenger Kids, Instagram, WhatsApp, Oculus, Workplace, Pages, payments, third-political party apps, or advertizement or developer accounts," Facebook vice president of production management Guy Rosen said in blog mail service—with one exception.

If an affected person was a Folio admin whose Page received a message from someone over Facebook, so the hackers would've been able to view the content.

"Nosotros're cooperating with the FBI, which is actively investigating and asked us not to discuss who may be backside this attack," Rosen said.

The mysterious hackers exploited three software vulnerabilities in the company's lawmaking involving the "View Every bit" feature, which lets you meet what your profile looks like to the public or a specific individual. According to Rosen, the attackers get-go stole admission to about 400,000 Facebook accounts, which they used as a launching pad to collect profile data from 29 million people. The attack began on Sept. xiv, merely Facebook only realized it was a threat by Sept. 25.

Rosen said Facebook has seen no evidence yet that the hackers have been using the stolen data. He declined to offering a location breakdown of where affected users alive, but said the attack was fairly broad.

To protect users, Facebook reset the access tokens to 90 million users' accounts. Check whether you were affected by the breach past visiting the visitor's Help Middle.

Source: https://sea.pcmag.com/news/29896/facebook-30-million-account-tokens-stolen-not-50-million

Posted by: boylesmaland.blogspot.com

Share this post