Facebook: Hackers accessed personal data from 29M accounts

<p>Facebook says hackers accessed a wide swath of information&nbsp;from millions of accounts as part of a security breach the company disclosed two weeks ago.</p>

News 12 Staff

Oct 12, 2018, 8:14 PM

Updated 2,021 days ago

Share:

By MAE ANDERSON
AP Technology Writer
NEW YORK (AP) - Facebook says hackers accessed a wide swath of information - ranging from emails and phone numbers to more personal details like sites visited and places checked into - from millions of accounts as part of a security breach the company disclosed two weeks ago.
Twenty-nine million accounts had some form of information stolen. Originally Facebook said 50 million accounts were affected, but that it didn't know if they had been misused.
The news comes at a jittery time ahead of the midterm elections when Facebook is fighting off misuse of its site on a number of fronts . The company said Friday there's no evidence this is related to the midterms.
On Friday Facebook said hackers accessed names, email addresses or phone numbers from these accounts. For 14 million of them, hackers got even more data, such as hometown, birthdate, the last 10 places they checked into or the 15 most recent searches.
An additional 1 million accounts were affected, but hackers didn't get any information from them.
Facebook isn't giving a breakdown of where these users are, but says the breach was "fairly broad." It plans to send messages to people whose accounts were hacked.
Facebook said third-party apps that use a Facebook login and Facebook apps like WhatsApp and Instagram were unaffected by the breach.
Facebook said the FBI is investigating, but asked the company not to discuss who may be behind the attack. The company said it hasn't ruled out the possibility of smaller-scale attacks that used the same vulnerability.
Facebook has said the attackers gained the ability to "seize control" of those user accounts by stealing digital keys the company uses to keep users logged in. They could do so by exploiting three distinct bugs in Facebook's code.
The hackers began with a set of accounts they controlled, then used an automated process to access the digital keys for accounts that were "friends" with the accounts they had already compromised. That expanded to "friends of friends," extending their access to about 400,000 accounts, and went on from there to reach 30 million accounts. There is no evidence that the hackers made any posts or took any other activity using the hacked accounts.
The company said it has fixed the bugs and logged out affected users to reset those digital keys.
At the time, CEO Mark Zuckerberg - whose own account was compromised - said attackers would have had the ability to view private messages or post on someone's account, but there's no sign that they did.
Facebook Vice President Guy Rosen said in a call with reporters on Friday the company hasn't ruled out the possibility of smaller-scale efforts to exploit the same vulnerability that the hackers used before it was disabled.
The company has a website its 2 billion global users can use to check if their accounts have been accessed, and if so, exactly what information was stolen. It will also provide guidance on how to spot and deal with suspicious emails or texts. Facebook will also send messages directly to those people affected by the hack.
Patrick Moorhead, founder of Moor Insights & Strategy, said the breach appeared similar to identity theft breaches that have occurred at companies including Yahoo and Target in 2013.
"Those personal details could be very easily be used for identity theft to sign up for credit cards, get a loan, get your banking password, etc.," he said. "Facebook should provide all those customers free credit monitoring to make sure the damage is minimized."
Thomas Rid, a professor at the Johns Hopkins University, also said the evidence, particularly the size of the breach, seems to point to a criminal motive rather than a sophisticated state operation, which usually targets fewer people.
"This doesn't sound very targeted at all," he said. "Usually when you're looking at a sophisticated government operation, then a couple of thousand people hacked is a lot, but they usually know who they're going after."
Copyright 2018 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.


More from News 12
0:51
Wildfire in Wharton State Forest consumes more than 400 acres of land

Wildfire in Wharton State Forest consumes more than 400 acres of land

1:56
Isolated storms tonight; freeze warning in effect for parts of NJ overnight

Isolated storms tonight; freeze warning in effect for parts of NJ overnight

2:54
Longtime Democratic US Rep. Donald Payne Jr. dies at 65 following heart attack

Longtime Democratic US Rep. Donald Payne Jr. dies at 65 following heart attack

1:53
Shop Mother’s Day Gifts – Exclusive Offers Up to 75% OFF!

Shop Mother’s Day Gifts – Exclusive Offers Up to 75% OFF!

0:56
Passaic to get $1.6M in federal funds to reduce flash flooding where 2 people died

Passaic to get $1.6M in federal funds to reduce flash flooding where 2 people died

2:56
Doctors combine a pig kidney transplant and a heart device in a bid to extend New Jersey woman's life

Doctors combine a pig kidney transplant and a heart device in a bid to extend New Jersey woman's life

0:43
Jersey Proud: Manchester HS students teach older generation about tech

Jersey Proud: Manchester HS students teach older generation about tech

2:23
'The tower is an eyesore.' Demolition of former Nabisco factory tower set to begin after 1-year delay

'The tower is an eyesore.' Demolition of former Nabisco factory tower set to begin after 1-year delay

1:03
Rep. Gottheimer announces another attempt to put an end to NYC’s congestion pricing plan

Rep. Gottheimer announces another attempt to put an end to NYC’s congestion pricing plan

0:29
Former Wawa gas attendant accused of stealing thousands of dollars from customers

Former Wawa gas attendant accused of stealing thousands of dollars from customers

1:33
AAA: New Jersey gas prices increase nearly 20 cents from last week

AAA: New Jersey gas prices increase nearly 20 cents from last week

2:12
Princeton University accused of violating civil rights of Jewish students

Princeton University accused of violating civil rights of Jewish students

0:37
Prosecutors: Former Jersey City police officer charged with sex assault, criminal restraint

Prosecutors: Former Jersey City police officer charged with sex assault, criminal restraint

0:27
Washington Township police issues warning over 'Water Wars' game

Washington Township police issues warning over 'Water Wars' game

0:34
Camden County man charged in crash that killed young mother

Camden County man charged in crash that killed young mother

2:18
Remnants of bird flu virus found in pasteurized milk, FDA says

Remnants of bird flu virus found in pasteurized milk, FDA says

0:32
US banning TikTok? Your key questions answered

US banning TikTok? Your key questions answered

0:35
Bon Jovi docuseries premieres Friday on Hulu

Bon Jovi docuseries premieres Friday on Hulu

0:31
New federal rule would bar 'noncompete' agreements for most employees

New federal rule would bar 'noncompete' agreements for most employees

1:02
Composting can save money, help gardens and save the planet. Here are 10 tips to get you started

Composting can save money, help gardens and save the planet. Here are 10 tips to get you started