Facebook failed to warn users of known risks before 2018 breach: court filing

Facebook failed to warn users of known risks before 2018 breach

Facebook (FB.O) users suing the world’s largest social media network over a 2018 data breach say it did not warn them about risks associated to its single sign-on tool, even though it protected its employees, a court filing on Thursday showed.

Single sign-on connects users to third-party social apps and services using their informations shared with Facebook.

The lawsuit, which combined several legal actions, stems from Facebook Inc’s worst-ever security breach in September, when hackers stole login codes – or “access tokens” – that allowed them to navigate through nearly 29 million accounts.

“Facebook knew about the access token risk and failed to fix it for years, despite that knowledge,” the plaintiffs said in a heavily obscured section of the filing in the U.S. District Court for the Northern District of California in San Francisco.

“Even more horribly, Facebook took steps to protect its own employees from the security risk, but not the vast majority of its users.”

Facebook did not immediately respond to a request for comment.

Judge William Alsup told Facebook in January he was willing to allow “bone-crushing discovery” in the case to find how much user data was stolen.

Facebook has revealed few details since initially disclosing the attack, saying only that it affected a “broad” spectrum of users across the globe.

The attackers stolen profile details such as birth dates, employers, education history, religious preference, types of devices used, pages followed and recent searches and location check-ins from 14 million users.

For the other 15 million users, the breach was restricted to name and contact details. In addition, attackers could access the posts and lists of friends and groups of about 400,000 users.

They did not steal personal messages or financial data and did not access users’ accounts on other websites, Facebook said.


Terry McKinney

Terry McKinney is the writer who is in charge of the Business news section at Instanews247. He is a business grad, who has a knack for trend analysis and change forecasting. His unique skills set him apart from any other business writers in the business, and solidify him as an asset to our team. Business news makes a deep impact on transmitting all the Wall Street action going down at top business houses, by making the details which would otherwise be unavailable, available to readers – and at Instanews247, we have Terry to thank for it!