Mark Zuckerberg of Facebook Is A Careless Wanker

533 million Facebook users' phone numbers and personal data have been leaked
The personal data of over 500 million Facebook users has been posted online 
in a low-level hacking forum.
The data includes phone numbers, full names, location, email address, and 
biographical information.

»www.businessinsider.com/ ··· e-2021-4

A user in a low level hacking forum has published the phone numbers and 
personal data of hundreds of millions of Facebook users for free online.

The exposed data includes personal information of over 533 million Facebook 
users from 106 countries, including over 32 million records on users in the 
US, 11 million on users in the UK, and 6 million on users in India. It 
includes their phone numbers, Facebook IDs, full names, locations, 
birthdates, bios, and — in some cases — email addresses.

Insider reviewed a sample of the leaked data and verified several records by 
matching known Facebook users' phone numbers with the IDs listed in the data 
set. We also verified records by testing email addresses from the data set 
in Facebook's password reset feature, which can be used to partially reveal 
a user's phone number.

The leaked data could provide valuable information to cybercriminals who use 
people's personal information to impersonate them or scam them into handing 
over login credentials, according to Alon Gal, CTO of cybercrime 
intelligence firm Hudson Rock, who first discovered the leaked data on 
Saturday.

"A database of that size containing the private information such as phone 
numbers of a lot of Facebook's users would certainly lead to bad actors 
taking advantage of the data to perform social engineering attacks [or] 
hacking attempts," Gal told Insider.

Facebook did not immediately respond to multiple requests for comment.
---
edit: FTA "Individuals signing up to a reputable company like Facebook..."
Muffled guffaws
  +10 · actions · 2021-Apr-3 1:30 pm ·

woody7
Premium Member
join:2000-10-13
Torrance, CA
that is why I don't do social media................/
  +9 · actions · 2021-Apr-3 1:46 pm ·
lawsoncl
join:2008-10-28
Spirit Lake, ID
to Shamayim
Is Facebook just upset that they didn't get paid for selling the info?
  +19 · actions · 2021-Apr-3 2:33 pm ·

vaxvms
ferroequine fan
Premium Member
join:2005-03-01
Wormtown
·Charter
to Shamayim
You forgot to include this
quote:
A Facebook spokesperson told Insider that the data was scraped due to a 
vulnerability that the company patched in 2019.

While a couple of years old, the leaked data could provide valuable 
information to cybercriminals who use people's personal information to 
impersonate them or scam them into handing over login credentials,
  +5 · actions · 2021-Apr-3 4:14 pm ·
InternetJeff
I'm your huckleberry.
join:2001-09-25
.
to Shamayim
Reason# 533,000,000 not to be attached to the Zuckerborg network.
  +10 · actions · 2021-Apr-3 4:19 pm ·
cramer
Premium Member
join:2007-04-10
Raleigh, NC
to Shamayim
What idiot tells facebook anything that isn't public knowledge? (i.e. stuff 
facebook already knows)
  +6 · actions · 2021-Apr-3 5:25 pm ·

Shamayim
Premium Member
join:2002-09-23
I dunno. 500 million? (Rough estimate).
  +6 · actions · 2021-Apr-3 6:48 pm ·
Shady Bimmer
Premium Member
join:2001-12-03
to cramer
said by cramer:
What idiot tells facebook anything that isn't public knowledge? (i.e. stuff 
facebook already knows)

said by Shamayim:
I dunno. 500 million? (Rough estimate).

I didn't see anything to suggest that everything exposed was previously 
necessarily private.  It is very possible (likely) that the data exposed was 
already "public".

There are those that do drink the koolaid and believe that the PII they 
provide is indeed truly kept secure and private.  Then again they're also 
likely to have provided that same detail to others 
(sites/networks/logins/etc) which negates at least somewhat any "privacy".

It is possible to use a separate (otherwise dedicated) email just for social 
networks, public forums, etc.  Similarly it is possible to use google voice 
(or similar) for phone numbers on services that so require it, keeping one's 
personal cell actually still "private" (note the quotes)

Whether or not individuals choose to take their own privacy seriously is a 
different question.  If privacy isn't taken seriously by the individual then 
such "breaches" likely won't expose information that hasn't already been 
voluntarily provided exposed previously.

If you have a mobile device then using a social network such as FB doesn't 
really compromise your privacy significantly further.  If you believe that 
your mobile provider is somehow that much better regarding privacy than 
social networks, then you may be in for a bit of an awakening.
  +4 · actions · 2021-Apr-3 7:29 pm ·

mackey
Premium Member
join:2007-08-20
said by Shady Bimmer:
If you have a mobile device then using a social network such as FB doesn't 
really compromise your privacy significantly further.  If you believe that 
your mobile provider is somehow that much better regarding privacy than 
social networks, then you may be in for a bit of an awakening.

What, exactly, are they selling and to whom are they selling it?  I don't 
get anywhere near enough junk calls to believe my provider sells my info. 
Perhaps you're confusing them with app makers who slurp everything and sell 
it to everyone+dog?
  · actions · 2021-Apr-3 8:16 pm ·
Shady Bimmer
Premium Member
join:2001-12-03
It isn't all about getting "junk calls".  In fact actual phone calls would 
likely have very little to do with even social media and have much more to 
do with robocalls.

It is all about tracking, and the detail sold by mobile providers is an 
important piece of all the other data that is collected.

Also don't forget that aside from your mobile provider the vendor for your 
phone that provides the OS and obligatory bundled apps also collects 
significant data.  That primarily amounts to either Apple or Google (which 
provides the android OS).

Apple and Google both acknowledge that they do collect data, but both also 
try to qualify that collection ("only for diagnostic", "anonymous", "only 
when needed", etc),  Their claims aren't any different than those of social 
media, but yet other media outlets focus on their competitors much more 
significantly (gee, I wonder why?)

It is interesting to note how most will complain about privacy when it 
involves something that won't have a personal impact.  Raise a point about 
something that does have a personal impact and they'll immediately jump on 
the defensive.

As another data point:  Have you ever tried to use a phone number as part of 
proving your identity only to have it rejected since the name on the account 
for the phone doesn't match the name you are trying to register?  Sending 
texts to the phone are only to prove that the phone is in your possession, 
to further validate the name/number match.

Nothing is as simple or innocent as it may seem.
  +2 · actions · 2021-Apr-3 9:10 pm ·

mackey
Premium Member
join:2007-08-20
said by Shady Bimmer:
Have you ever tried to use a phone number as part of proving your identity 
only to have it rejected since the name on the account for the phone doesn't 
match the name you are trying to register?

No, I can't say I have ever used my phone as proof of identity.  Wouldn't 
work either as both my phone and internet are under pseudonyms.
  +6 · actions · 2021-Apr-3 10:20 pm ·
hardly
Premium Member
join:2004-02-10
USA
(Software) pfSense
Asus RT-AC68
Netgear CM600
said by mackey:
Wouldn't work either as both my phone and internet are under pseudonyms.

Really?
You mean that your name actually is not Wolfgang Mozart?
  +3 · actions · 2021-Apr-4 3:47 am ·
HELLFIRE
MVM
join:2009-11-25
to Shamayim
Facebook, our knight in shining armor, defender of our privacy and security! 
[/extreme malice and sarcasm]

I don't expect much in the way of consequences this side of the Atlantic, 
but I hope GDPR has a bigger bite...

Regards
  +6 · actions · 2021-Apr-4 11:40 am ·
HELLFIRE
to Shamayim
»haveibeenzucked.com/ -- this is new to me, but fairly simple to use and 
check if your Facebook info leaked...

Regards
  +6 · actions · 2021-Apr-5 5:58 pm ·

Unbundled
But When ? ?
Premium Member
join:2010-09-13
Irving, TX
to Shamayim
I never shared my phone # with FB. I signed up with a very obscure email 
address.
  +2 · actions · 2021-Apr-7 8:04 pm ·

ashrc4
Premium Member
join:2009-02-06
australia
to HELLFIRE
said by HELLFIRE:
»haveibeenzucked.com/ -- this is new to me, but fairly simple to use and 
check if your Facebook info leaked...

Regards

Have I been pwned also now has added the  list.

»haveibeenpwned.com/
Click for full size

They got my cell no. but not the email.
P.s. only 2.5million email addresses were stolen out of the half a billion 
phone no.s.
  +5 · actions · Yesterday 5:34 am ·

Unbundled
But When ? ?
Premium Member
join:2010-09-13
Irving, TX
said by ashrc4:
P.s. only 2.5million email addresses were stolen out of the half a billion 
phone no.s.

Yeah, the % of the # of emails gotten was just .005, so no biggie!!!
  · actions · Yesterday 2:53 pm ·

ashrc4
Premium Member
join:2009-02-06
australia
to Shamayim
Well this is confusing to say the least.
Click for full size


My phone no is pawned on one and not the other.
  +2 · actions · Yesterday 8:40 pm ·

antdude
ANTh Vader
Premium Member
join:2001-03-25
US
to Shamayim
Are these web sites trust worthy to enter our e-mail addresses and phone 
numbers to check? :P
  +2 · actions · Today 1:13 am ·

ashrc4
Premium Member
join:2009-02-06
australia
1 edit
said by antdude:
Are these web sites trust worthy to enter our e-mail addresses and phone 
numbers to check? :P

Have I been zucked.com seems to store your tries in a cookie. Closing the 
tab and returning the tries remain persistent. It also has no privacy 
link/statement either.

The link to haveibeenpwned privacy statement.