Yes. This is one of several similar cases the FTC has pursued against social media companies over the last few years. I believe Facebook had a bug that inadvert

Yes. This is one of several similar cases the FTC has pursued against social media companies over the last few years. I believe Facebook had a bug that inadvertently outed their misuse of the 2FA phone numbers for advertising and that was what initially put the practice on the FTC’s radar. Around the start of the pandemic the FTC actually did a study[1] looking at the “secondary uses” of security data. They registered for 2FA with a bunch of websites and then tracked how many non-2FA related calls and text messages the phone numbers received. While the experiment was a great idea I think the way they structured it leaves much to be desired. [1][PDF] https://www.ftc.gov/system/files/attachments/office-technology-research-investigation/way2020-kim.pdf https://www.ftc.gov/system/files/attachments/office-technolo...