Facebook

7 breaches649M affected in allTechfacebook.com

Hacking breachHacking exposed emails, location data, names, passwords and phone numbers.77K accountsTechUnverifiedFeb 22, 2024 Twelve 2018 Facebook breach notifications; Irish DPC fine of EUR 17MTechUSMar 15, 2022 Scraped dataset of 533M Facebook users posted online; Irish DPC fine of EUR 265MScraping exposed dates of birth, emails, employment records, location data, names and phone numbers.Scraping533M affectedTechUSApr 3, 2021 Exposed server holds 419 million records linking Facebook IDs to phone numbersScraping exposed phone numbers.ScrapingTechUSUnverifiedSep 4, 2019 Hundreds of millions of passwords stored in plaintext; Irish DPC fine of EUR 91MExposed data exposed passwords.Exposed dataTechUSMar 21, 2019 2018 View As token theft hit 29M Facebook accounts; Irish DPC fines of EUR 251MHacking exposed names, emails, phone numbers, location data, employment records, dates of birth and children's data.Hacking29M affectedTechUSSep 28, 2018 Data of up to 87 million Facebook users improperly shared with Cambridge AnalyticaVendor breach exposed names and location data.Vendor breach87M affectedTechUSMar 17, 2018

About

Every breach here links to its sources and official notices. Across Glyph: lawsuits, incidents and outages.

status2026-09-25

Facebook, 2018-09-28settled

fine_usd2026-09-25

Facebook, 2018-09-28263000000

lawsuit2026-09-25

Facebook, 2018-09-28EUR 251M Irish DPC fines (Dec 2024)

data_types2026-09-25

Facebook, 2018-09-28["names","emails","phone","other","location","employment","dob","children"]

summary2026-09-25

Facebook, 2018-09-28Attackers exploited Facebook's View As feature to steal user access tokens in September 2018; Facebook first said 50 million accounts were at risk and the DPC later put the impact at about 29 million accounts, 3 million in the EU/EEA. The D

title2026-09-25

Facebook, 2018-09-282018 View As token theft hit 29M Facebook accounts; Irish DPC fines of EUR 251M

Added2026-09-25

Facebook, 2019-03-21

status2026-09-25

Facebook, 2021-04-03settled

fine_usd2026-09-25

Facebook, 2021-04-03275000000

lawsuit2026-09-25

Facebook, 2021-04-03EUR 265M Irish DPC fine (Nov 2022)

summary2026-09-25

Facebook, 2021-04-03A dataset of phone numbers, Facebook IDs, names, locations, birth dates and some emails covering over 533 million users was posted on a hacking forum in April 2021; Facebook said it came from scraping via contact importer features. Ireland'

title2026-09-25

Facebook, 2021-04-03Scraped dataset of 533M Facebook users posted online; Irish DPC fine of EUR 265M

Added2026-09-25

Facebook, 2022-03-15

records2026-09-25

Facebook, 2018-03-1750000000

Added2026-09-25

Facebook, 2018-03-17

records2026-09-25

Facebook, 2018-09-2850000000

Added2026-09-25

Facebook, 2018-09-28

Added2026-09-25

Facebook, 2019-09-04

source_type2026-09-25

Facebook, 2021-04-03company

source_url2026-09-25

Facebook, 2021-04-03https://about.fb.com/news/2021/04/facts-on-news-reports-about-facebook-data/

status2026-09-25

Facebook, 2021-04-03confirmed

verified_by2026-09-25

Facebook, 2021-04-03research

verified2026-09-25

Facebook, 2021-04-031

country2026-09-25

Facebook, 2021-04-03US

attack2026-09-25

Facebook, 2021-04-03scraping

records_basis2026-09-25

Facebook, 2021-04-03organization

records2026-09-25

Facebook, 2021-04-03533000000

disclosed2026-09-25

Facebook, 2021-04-032021-04-03

summary2026-09-25

Facebook, 2021-04-03Data on more than 530 million Facebook users, mainly phone numbers linked to profiles, was published online; Facebook said it was scraped via its contact importer before September 2019.

title2026-09-25

Facebook, 2021-04-03Scraped data of 533 million Facebook users posted free online