Facebook releases details on Sept Hack, 30, not 50 million.

[rcmaehl]

Source:
The Verge

 

TL;DR:

Facebook has stated 30 million accounts were affected, stolen data includes basic contact information (name and either email or phone number) for 14 million accounts, and additional information including gender, religion, location, device information, and the 15 most recent searches for another 15 million accounts.

 

Quotes/Excerpts:

Quote

In September, a group of hackers used a flaw in Facebook’s “view as” feature to gain unauthorized access to millions of accounts. The hackers stole access tokens for 30 million accounts, allowing them to gain complete access to the profiles. The hackers accessed basic contact information (name and either email or phone number) for 14 million accounts, and additional information including gender, religion, location, device information, and the 15 most recent searches for another 15 million accounts. No information was accessed for the remaining one million accounts. Facebook has pledged to notify all 30 million users through the Help Center in the coming days. No data was taken from third-party apps linked to the accounts, including Facebook products like Instagram, Messenger and WhatsApp. There’s also no indication that the hackers posted any content while logged in. The first spike of activity registered on September 14th, but it wasn’t until 11 days later that Facebook identified the activity as a malicious attack.The vulnerability was closed two days later. Facebook also confirmed that the FBI is actively investigating the hack.

 

My Thoughts:

It's at least at as bad as it could have been. No external websites or apps were accessed, and only basic profile information was stolen. Device information is a bit concerning for SIM swapping but that's the worst I can think of. Any attack would be social engineering based on information gathered past this point.

[ScratchCat]

Quote

14 million accounts, and additional information including gender, religion, location, device information, and the 15 most recent searches for another 15 million account

15 + 14 = 30

[rcmaehl]

4 minutes ago, ScratchCat said:

15 + 14 = 30

No information was accessed for the remaining one million accounts is noted in the Quotes/Excerpts.

[rcmaehl]

Just now, VegetableStu said:

hey Facebook, go do a Google+

 

*runs*

Have another data breach?

[rcmaehl]

6 minutes ago, VegetableStu said:

SHUT DOWN AFTER A DATA BREACH D:<

BUT MY CIRCLES!

[soldier_ph]

LOL, get wrecked Facebook (and affected users).  # 

[Speed Weed]

3 hours ago, ScratchCat said:

15 + 14 = 30

This math needs Jesus.

[Trik'Stari]

By "stolen" do they mean "sold'?

 

Or is it "theft" because the bastards didn't pay up?

[Beskamir]

On 10/12/2018 at 4:58 PM, Trik'Stari said:

By "stolen" do they mean "sold'?

 

Or is it "theft" because the bastards didn't pay up?

Or the bastards underpaid and facebook demands they return the goods.

[bitsandpieces]

When the margin of error is tens of millions does it even matters?

[asus killer]

On 10/12/2018 at 7:21 PM, rcmaehl said:

name and either email or phone number) for 14 million accounts, and additional information including gender, religion, location, device information, and the 15 most recent searches for another 15 million accounts.

 

it doesn't seem to bad, most people have that information public anyway. Still, so much money and this guys can't seem to get their shit straight, it's bad news after bad news.