4 ms·
> For 15 million people, attackers accessed two sets of information – name and contact details (phone number, email, or both, depending on what people had on th
by denzil_correa 8y ago
> For 15 million people, attackers accessed two sets of information – name and contact details (phone number, email, or both, depending on what people had on their profiles). For 14 million people, the attackers accessed the same two sets of information, as well as other details people had on their profiles. This included username, gender, locale/language, relationship status, religion, hometown, self-reported current city, birthdate, device types used to access Facebook, education, work, the last 10 places they checked into or were tagged in, website, people or Pages they follow, and the 15 most recent searches.
Another reason to not use your phone number as a unique identifier.
- hw 8y agoIt's also a good idea to just not use Facebook, or at least scrub all profile details and any personal information including pictures. On a more serious note, the unusual activity started Sept 14, took then 11 days before actually determining that it was an exploit, and took then 2 days after that to actually fix the issue. 2 days might not seem like a long time, but with automation, the hackers could have gone through a lot more accounts in that time frame.
- mehrdadn 8y agoBirthday is pretty bad. They treat these as if they're all the same when they're not.