Skip to content
Breaches.

Facebook

7 breaches649M affected in allTechfacebook.com

BreachAffected
Disclosed Feb 22, 2024Feb 22, 20242 years agoHackingUnverified77Kacct
Twelve 2018 Facebook breach notifications; Irish DPC fine of EUR 17MMar 15, 20224 years agoUnknown
Scraped dataset of 533M Facebook users posted online; Irish DPC fine of EUR 265MApr 3, 20215 years agoScraping533M
Exposed server holds 419 million records linking Facebook IDs to phone numbersSep 4, 20197 years agoScrapingUnverifiedUnknown
Hundreds of millions of passwords stored in plaintext; Irish DPC fine of EUR 91MMar 21, 20197 years agoExposed dataUnknown
2018 View As token theft hit 29M Facebook accounts; Irish DPC fines of EUR 251MSep 28, 20187 years agoHacking29M
Data of up to 87 million Facebook users improperly shared with Cambridge AnalyticaMar 17, 20188 years agoVendor breach87M
About

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

  • 2026-09-25 · Facebook, 2018-09-28 · status: settled
  • 2026-09-25 · Facebook, 2018-09-28 · fine_usd: 263000000
  • 2026-09-25 · Facebook, 2018-09-28 · lawsuit: EUR 251M Irish DPC fines (Dec 2024)
  • 2026-09-25 · Facebook, 2018-09-28 · data_types: ["names","emails","phone","other","location","employment","dob","children"]
  • 2026-09-25 · Facebook, 2018-09-28 · summary: Attackers exploited Facebook's View As feature to steal user access tokens in September 2018; Facebook first said 50 million accounts were at risk and the DPC later put the impact at about 29 million accounts, 3 million in the EU/EEA. The D
  • 2026-09-25 · Facebook, 2018-09-28 · title: 2018 View As token theft hit 29M Facebook accounts; Irish DPC fines of EUR 251M
  • 2026-09-25 · Facebook, 2019-03-21 · added
  • 2026-09-25 · Facebook, 2021-04-03 · status: settled
  • 2026-09-25 · Facebook, 2021-04-03 · fine_usd: 275000000
  • 2026-09-25 · Facebook, 2021-04-03 · lawsuit: EUR 265M Irish DPC fine (Nov 2022)
  • 2026-09-25 · Facebook, 2021-04-03 · summary: A dataset of phone numbers, Facebook IDs, names, locations, birth dates and some emails covering over 533 million users was posted on a hacking forum in April 2021; Facebook said it came from scraping via contact importer features. Ireland'
  • 2026-09-25 · Facebook, 2021-04-03 · title: Scraped dataset of 533M Facebook users posted online; Irish DPC fine of EUR 265M
  • 2026-09-25 · Facebook, 2022-03-15 · added
  • 2026-09-25 · Facebook, 2018-03-17 · records: 50000000
  • 2026-09-25 · Facebook, 2018-03-17 · added
  • 2026-09-25 · Facebook, 2018-09-28 · records: 50000000
  • 2026-09-25 · Facebook, 2018-09-28 · added
  • 2026-09-25 · Facebook, 2019-09-04 · added
  • 2026-09-25 · Facebook, 2021-04-03 · source_type: company
  • 2026-09-25 · Facebook, 2021-04-03 · source_url: https://about.fb.com/news/2021/04/facts-on-news-reports-about-facebook-data/
  • 2026-09-25 · Facebook, 2021-04-03 · status: confirmed
  • 2026-09-25 · Facebook, 2021-04-03 · verified_by: research
  • 2026-09-25 · Facebook, 2021-04-03 · verified: 1
  • 2026-09-25 · Facebook, 2021-04-03 · country: US
  • 2026-09-25 · Facebook, 2021-04-03 · attack: scraping
  • 2026-09-25 · Facebook, 2021-04-03 · records_basis: organization
  • 2026-09-25 · Facebook, 2021-04-03 · records: 533000000
  • 2026-09-25 · Facebook, 2021-04-03 · disclosed: 2021-04-03
  • 2026-09-25 · Facebook, 2021-04-03 · summary: Data on more than 530 million Facebook users, mainly phone numbers linked to profiles, was published online; Facebook said it was scraped via its contact importer before September 2019.
  • 2026-09-25 · Facebook, 2021-04-03 · title: Scraped data of 533 million Facebook users posted free online

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.