According to the announcement, Google can only say that no one abused the vulnerability in the two weeks prior to discovery. > We made Google+ with privacy in

According to the announcement, Google can only say that no one abused the vulnerability in the two weeks prior to discovery. > We made Google+ with privacy in mind and therefore keep this API’s log data for only two weeks. That means we cannot confirm which users were impacted by this bug. However, we ran a detailed analysis over the two weeks prior to patching the bug, and from that analysis, the Profiles of up to 500,000 Google+ accounts were potentially affected. Our analysis showed that up to 438 applications may have used this API.