Facebook

Facebook is charged with another fine.

This time the social network is handing over CAD$9 million (US$6.5 million / £5.3 million) to Canada as part of a settlement.

Facebook “made false or misleading claims about the privacy of Canadians’ personal information on Facebook and Messenger” and improperly shared data with third-party developers.

Facebook gave the impression that users could control who could see and access their personal information on the Facebook platform when using privacy features.

Facebook also allowed certain third-party developers to access the personal information of users’ friends after they installed certain third-party applications.

Source: https://www.engadget.com/canada-fines-facebook-almost-65-million-over-false-data-privacy-claims-000524114.html?guccounter=1&guce_referrer=aHR0cHM6Ly93d3cuZGF0YWJyZWFjaGVzLm5ldC9jYW5hZGEtZmluZXMtZmFjZWJvb2stYWxtb3N0LTYtNS1taWxsaW9uLW92ZXItZmFsc2UtZGF0YS1wcml2YWN5LWNsYWltcy8&guce_referrer_sig=AQAAACad7Z9hcxhhtw7K2gNf-7GhB-FyDLQ12tUwxRj4Kbc2UQkpnd1g3Mql0BjlEXtNh7bYJW1IAc-s_OBfUpjAmGgel4CUyQ2TaAmu8MSD37yu1uvqhw78Dwt97kKgScORH56VTnupmq_kwMU5oCOCNmss7ToqvgrQtTgKQ_S0rmOQ

TPRM report: https://scoringcyber.rankiteo.com/company/facebook

"id": "fac2050291222",
"linkid": "facebook",
"type": "Breach",
"date": "05/2020",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Technology',
                        'location': 'Global',
                        'name': 'Facebook',
                        'size': 'Large',
                        'type': 'Social Network'}],
 'attack_vector': 'Improper Access Control',
 'data_breach': {'type_of_data_compromised': 'Personal Information'},
 'description': 'Facebook is charged with another fine. This time the social '
                'network is handing over CAD$9 million (US$6.5 million / £5.3 '
                'million) to Canada as part of a settlement. Facebook made '
                'false or misleading claims about the privacy of Canadians’ '
                'personal information on Facebook and Messenger and improperly '
                'shared data with third-party developers. Facebook gave the '
                'impression that users could control who could see and access '
                'their personal information on the Facebook platform when '
                'using privacy features. Facebook also allowed certain '
                'third-party developers to access the personal information of '
                'users’ friends after they installed certain third-party '
                'applications.',
 'impact': {'data_compromised': 'Personal Information',
            'financial_loss': 'CAD$9 million (US$6.5 million / £5.3 million)'},
 'motivation': 'Data Access',
 'regulatory_compliance': {'fines_imposed': 'CAD$9 million (US$6.5 million / '
                                            '£5.3 million)'},
 'threat_actor': 'Third-party Developers',
 'title': 'Facebook Fined for Privacy Violations in Canada',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Privacy Controls'}