Facebook user data and phone numbers leaked, including 3 million users in Hong Kong

The personal data and phone numbers of 553 million Facebook users was posted on a hacking forum on Saturday. The leaked dataset includes 2.9 million users which appear to be Hong Kong-based.

Users from 106 countries are affected, with their Facebook IDs, full names, bios, locations, birthdays and phone numbers exposed.

All 533,000,000 Facebook records were just leaked for free.

This means that if you have a Facebook account, it is extremely likely the phone number used for the account was leaked.

I have yet to see Facebook acknowledging this absolute negligence of your data. https://t.co/ysGCPZm5U3 pic.twitter.com/nM0Fu4GDY8
— Alon Gal (Under the Breach) (@UnderTheBreach) April 3, 2021

News of the hack was shared by Alon Gal of Israeli cybercrime intelligence firm Hudson Rock. “This means that if you have a Facebook account, it is extremely likely the phone number used for the account was leaked,” he wrote on Twitter. “I have yet to see Facebook acknowledging this absolute negligence of your data.”

Facebook said in a statement that the data was “very old” and connected to an issue it had fixed in August 2019, according to Reuters.

Be on guard

Hong Kong-based technologist Mart van de Ven told HKFP that users should be on guard for suspicious calls or text messages in case bad actors use their numbers for social engineering scams: “This data can be used to impersonate you, for example when you have to provide your phone number as ‘proof’ of who you are.”

File photo: Tom Grundy/HKFP.

“Remove your phone number from any service where you’ve provided it, and modify or set up two-factor authentication on important services,” he said. Van de Ven added that SMS should not be used in a two-factor set-up and that users should consider changing their phone numbers.

In 2016, the social media network was embroiled in a scandal whereby political data firm Cambridge Analytica was found to have accessed data belonging to up to 87 million Facebook users without their consent. Facebook since tightened its control of how third-party apps can access user data.

Help safeguard press freedom & keep HKFP free for all readers by supporting our team