Facebook reveals 30 MILLION profiles were hacked in security breach – here’s how to check if you were one of them
The breach - thought to be the worst in Facebook's history - comes amid mounting pressure on Mark Zuckerberg over his company's failure to properly safeguard user data
HACKERS stole the names and contact details of 29 MILLION Facebook users, the tech giant has admitted.
The breach - thought to be the worst in Facebook's history - comes amid mounting pressure on Mark Zuckerberg over his company's failure to properly safeguard user data.
On Friday, the company revealed that the hackers used digital login codes to take data from 14 million users.
The initial blunder even affected accounts belonging to Zuckerberg and Sheryl Sandberg.
A problem with the site's code allowed hackers to use Facebook account "as if they were the account holder" – a shocking security gaffe.
But because of the way the hack worked, it also gave attackers the same level of access to any accounts you use Facebook to log in with.
Facebook hack timeline – when did it all happen?
Here's what you need to know...
- The vulnerability in Facebook's code was the result of three separate bugs
- These were created in July 2017, when Facebook created a new video upload functionality
- On September 16, 2018, Facebook discovered unusual activity, which manifested itself as a "spike in users", according to officials
- Facebook then launched an investigation
- On Tuesday, September 25, Facebook uncovered the attack and found the vulnerability
- On Wednesday, September 26, Facebook notified law enforcement
- On Thursday September 27, Facebook said it fixed the vulnerability
- On Friday September 28, Facebook disclosed the vulnerability to the public
- On Friday October 12, Facebook admitted 30m accounts were breached
MOST READ IN NEWS
Facebook said it would send customised messages in the coming days to affected users to explain what information the attackers accessed and how they can protect themselves.
A spokesperson said: "Within two days, we closed the vulnerability, stopped the attack and secured people's accounts by restoring the access tokens for people who were potentially exposed."
"This attack did not include Messenger, Messenger Kids, Instagram, WhatsApp, Oculus, Workplace, Pages, payments, third-party apps, or advertising or developer accounts."
We pay for your stories! Do you have a story for The Sun Online news team? Email us at [email protected] or call 0207 782 4368. You can WhatsApp us on 07810 791 502. We pay for videos too. Click here to upload yours.