The names and profile pictures of users who were a part of certain groups, according to Facebook Inc., were shared privately by users within some groups on its main social network.
Which users shared posts or left comments inside a group could be seen by a programme that enables information sharing between Facebook and outside developers.
Access to the material has reportedly been withdrawn or restricted, according to the organisation.
A recent examination by the corporation revealed that this additional information was also being distributed.
TPRM report: https://scoringcyber.rankiteo.com/company/meta
"id": "met84930423",
"linkid": "meta",
"type": "Data Leak",
"date": "11/2019",
"severity": "50",
"impact": "1",
"explanation": "Attack without any consequences"
{'affected_entities': [{'industry': 'Social Media',
'name': 'Facebook Inc.',
'type': 'Company'}],
'attack_vector': ['Data Sharing Program'],
'data_breach': {'personally_identifiable_information': ['Names',
'Profile Pictures'],
'type_of_data_compromised': ['Names',
'Profile Pictures',
'Posts',
'Comments']},
'description': 'The names and profile pictures of users who were a part of '
'certain groups, according to Facebook Inc., were shared '
'privately by users within some groups on its main social '
'network. Which users shared posts or left comments inside a '
'group could be seen by a programme that enables information '
'sharing between Facebook and outside developers. Access to '
'the material has reportedly been withdrawn or restricted, '
'according to the organisation. A recent examination by the '
'corporation revealed that this additional information was '
'also being distributed.',
'impact': {'data_compromised': ['Names',
'Profile Pictures',
'Posts',
'Comments']},
'response': {'containment_measures': ['Access Withdrawn or Restricted']},
'title': 'Facebook Group Data Sharing Incident',
'type': ['Data Breach'],
'vulnerability_exploited': ['Information Sharing Program']}