540 million private Facebook records found on public Internet

Internet

Related stories

• 540 million private Facebook records found on public Internet
• UK police locate missing Chinese teen Mei Chen, silent on details
• Technology giant Microsoft completes acquisition of GitHub
• Microsoft announces plan to acquire GitHub for US$7.5 billion
• Amazon to buy smart doorbell startup Ring

More information at Wikipedia:

• Internet portal
• Internet
• History of the Internet
• Internet censorship
• Internet Protocol
• World Wide Web

Monday, April 8, 2019

According to a report on Wednesday byUpGuard, a cybersecurity firm, twodatabases containing user data fromFacebook were found on Amazon.comweb servers accessible to the public on the internet. Information leaked included user ID's, photos, Facebook friend and group lists, and interests.

Facebook's logo

One of the databases is owned by theMexican company Cultura Colectiva, which specializes in digital media, while the other is owned by a separate Facebook-integrated app, At the Pool. In these two instances, the records were publicly available because the "Amazon S3 Buckets" on which the data were stored were misconfigured to allow public access instead of only private access. The original report was not entirely clear about this point, andWikinews confirmed with UpGuard that the two incidents involved two separate Amazon S3 buckets.

UpGuard reportedly sent an email to Cultura Colectiva on January 10, and again on January 14, but received no response. On January 28, UpGuard reportedly emailed Amazon Web Services informing them of the situation, to which on February 1 Amazon Web Services acknowledged the bucket's owner had been informed. After the database had still not been secured, UpGuard reportedly emailed Amazon Web Services again on February 21, with Amazon Web services responding that they would investigate what else could be done about it. Reportedly, the Amazon S3 Buckets were only secured after Bloomberg contacted Facebook.

The Guardian drew comparisons between this case and the Cambridge Analyticascandal, in which over 50 million Facebook profiles were harvested for data without users' knowledge or consent.

Have an opinion on this story? Share it!

Sources

• "Losing Face: Two More Cases of Third-Party Facebook App Data Exposure" — UpGuard, April 3 2019
• Jason Silverstein. "Millions of Facebook user records were exposed on Amazon cloud server" — CBS News, April 3 2019
• Julia Carrie Wong. "Hundreds of millions of Facebook records exposed on public servers – report" — The Guardian, April 3 2019