Disclosed Sep 4, 20197 years agoUnverified
Exposed server holds 419 million records linking Facebook IDs to phone numbers
TechCrunch found an unprotected server with more than 419 million records linking Facebook user IDs to phone numbers, including 133 million US, 18 million UK and 50 million Vietnam records.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 4, 2019 |
| Attack | Scraping |
| Data exposed | Phone numbers, Other |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| A huge database of Facebook users' phone numbers found onlinetechcrunch.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Sep 4, 2019 |
Other breaches at Facebook
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Feb 22, 2024Feb 22, 20242 years agoHackingUnverified | Feb 22, 20242 years ago | Hacking | Tech | Unverified | 77Kacct |
| Twelve 2018 Facebook breach notifications; Irish DPC fine of EUR 17MMar 15, 20224 years ago | Mar 15, 20224 years ago | Not stated | Tech | Settled | Unknown |
| Scraped dataset of 533M Facebook users posted online; Irish DPC fine of EUR 265MApr 3, 20215 years agoScraping | Apr 3, 20215 years ago | Scraping | Tech | Settled | 533M |
| Hundreds of millions of passwords stored in plaintext; Irish DPC fine of EUR 91MMar 21, 20197 years agoExposed data | Mar 21, 20197 years ago | Exposed data | Tech | Settled | Unknown |
| 2018 View As token theft hit 29M Facebook accounts; Irish DPC fines of EUR 251MSep 28, 20187 years agoHacking | Sep 28, 20187 years ago | Hacking | Tech | Settled | 29M |
| Data of up to 87 million Facebook users improperly shared with Cambridge AnalyticaMar 17, 20188 years agoVendor breach | Mar 17, 20188 years ago | Vendor breach | Tech | Settled | 87M |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.