Skip to content
Breaches.

Facebook

Disclosed Feb 22, 20242 years ago77,267 accountsUnverified

In February 2024, 200k Facebook Marketplace records allegedly obtained from a Meta contractor in October 2023 were posted to a popular hacking forum . The data contained 77k unique email addresses alongside names, phone numbers, Facebook profile IDs and geographic locations. The data also contained bcrypt password hashes, although there is no indication these belong to the corresponding Facebook accounts.

What is known

People affected77,267 (accounts in the leaked data, per Have I Been Pwned)
DisclosedFeb 22, 2024
HappenedOct 1, 2023
AttackHacking
Data exposedEmails, Location, Names, Passwords, Phone numbers
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Facebook Marketplacehaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataFeb 22, 202477,267

Other breaches at Facebook

BreachAffected
Twelve 2018 Facebook breach notifications; Irish DPC fine of EUR 17MMar 15, 20224 years agoUnknown
Scraped dataset of 533M Facebook users posted online; Irish DPC fine of EUR 265MApr 3, 20215 years agoScraping533M
Exposed server holds 419 million records linking Facebook IDs to phone numbersSep 4, 20197 years agoScrapingUnverifiedUnknown
Hundreds of millions of passwords stored in plaintext; Irish DPC fine of EUR 91MMar 21, 20197 years agoExposed dataUnknown
2018 View As token theft hit 29M Facebook accounts; Irish DPC fines of EUR 251MSep 28, 20187 years agoHacking29M
Data of up to 87 million Facebook users improperly shared with Cambridge AnalyticaMar 17, 20188 years agoVendor breach87M
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Facebook

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.