This article is more than
5 year old
Facebook
Hundreds of millions of Facebook records exposed on Amazon cloud servers
April 3, 2019 at 18:27
Researchers found two third-party Facebook app developers had been storing user data on a publicly accessible Amazon Web Services server.
New York (CNN Business) - A vast collection of data on Facebook users was exposed to the public until recently on Amazon's cloud computing servers, researchers have found.
Two third-party Facebook app developers were found to have stored user data on Amazon's servers in a way that allowed it to be downloaded by the public, according to a report from UpGuard, a cybersecurity firm.One of the companies stored 146 gigabytes of data containing more than 540 million records, including comments, likes, reactions and account names, on the Amazon servers, according to UpGuard. The number of users whose data was included is not yet clear.
Another app is said to have stored unprotected Facebook passwords for 22,000 users.
Vickery said that the data appeared to have been gathered through a Facebook integration. Facebook allows third party developers to integrate apps and websites with its platform to allow for functionality like signing into a service using Facebook.
Facebook has "no way of guaranteeing the safe storage of the data of their end users if they are going to allow app developers to harvest it in mass," Vickery said.
In a statement provided to CNN Business, a Facebook spokesperson said, "Facebook's policies prohibit storing Facebook information in a public database. Once alerted to the issue, we worked with Amazon to take down the databases. We are committed to working with the developers on our platform to protect people's data."
Representatives for Amazon did not immediately respond to a request for comment.
Bloomberg was first to report the news.
The new finding is the latest to highlight Facebook's struggle to protect the data collected from its more than 2 billion users. It may only increase scrutiny on the company after a year of data privacy scandals.
Last March, news broke that Cambridge Analytica, a data firm with ties to Donald Trump's presidential campaign, accessed information from as many as 87 million Facebook users without their knowledge.
Facebook has said the data was initially collected by a professor for academic purposes in line with its rules. The information was later transferred to third parties, including Cambridge Analytica, in violation of Facebook's policies, Facebook has said.
Politicians on both sides of the Atlantic have sharply criticized the company's data privacy practices. The U.S. Federal Trade Commission is said to be looking to levy a record fine against the company for violating an earlier data privacy agreement. In October, UK authorities hit Facebook with a £500,000 fine, the maximum possible, over the Cambridge Analytica scandal.
Keywords
Newer articles
In case you missed it
Huge blow for Trump in hush money case
Huge blow for TikTok in US court
Drones are buzzing around US military bases, even forcing one to close its airspace. They reflect a growing problem.
Elon Musk net worth more than Bezos and Zuckerberg combined
Igor Kirillov: Russia's chemical weapons chief and mouthpiece killed in Moscow
Supreme Court to Consider TikTok Ban
FRESH HOPE: Huge update announced in search for MH370
Trump meeting with TikTok CEO at Mar-a-Lago as company asks Supreme Court to intervene in fight over federal ban
How rich musicians billed American taxpayers for luxury hotels, shopping sprees, and million-dollar bonuses