In 2021, data on 533 million Facebook users across more than 100 countries was scraped via a contact-importer flaw and leaked for free on a hacking forum.
Key facts
- Exposed data on 533 million users, leaked publicly in 2021.
- Collected by abusing a contact-importer feature, not a classic hack.
- Included phone numbers, names and other profile details.
- Contributed to a 265 million euro fine from the Irish Data Protection Commission.
The lesson
Scraping at scale is as damaging as a breach. Features that expose user data must be designed and rate-limited with abuse in mind.
How DarkThreatX helps
DarkThreatX monitors the dark web for breached records, leaked credentials and threat-actor activity tied to your organisation. Run a free dark web scan or explore the platform.
