Media reports and cybercrime experts pointed out that, in 2019, was originally leaked by more than 500 million Facebook users a resource, including email address and telephone number, etc., has been posted in an online hacker forum for free.
Agence France-Presse reported that Alon Gal, chief technology officer of Israeli cybercrime intelligence industry HudsonRock, said on Twitter today: “All 533 million Facebook records have been leaked for free use.”
Gal condemned what he called Facebook “total negligence.”
According to a report by Business Insider, part of the leaked personal information seems to be current information, but AFP could not independently confirm it. The report said that some of the leaked phone numbers still belonged to those Facebook account holders.
Gal said: “This means that if you have a Facebook account, it is extremely likely that the phone number used by that account has been leaked.”
But Facebook said those reports are old news. A Facebook spokesperson told Agence France-Presse: “This is old information that was previously reported in 2019. We have resolved this issue in August 2019.”
Gal tweeted in January that the affected data covers 533 million Facebook users from 106 countries, including more than 32 million American users, 20 million French users, and 11 million British users. Some try to sell them.
That personal information includes phone numbers, full names, birthdays, as well as the email addresses and relationship status of some accounts.
Gal said on Twitter: “The bad guys will definitely use that information for social engineering, scams, intrusions, marketing, etc.”
Reuters reported that, according to Gal, the leaked information seems to be the Facebook-related phone numbers that have been circulated in the hacker circle since January this year. The technical journal Motherboard was the first to disclose that database.
Gal said today that he has verified that at least some of the information is true by comparing the phone numbers of people he knows. Reporters from other media can also use known phone numbers to verify the authenticity of the data.
Gal told Reuters that Facebook users in the next few months should be careful not to launch “social engineering attacks” by those who have obtained their phone numbers or other private information.