A massive 1.2 billion user record database was scraped from
the Meta-owned Facebook by abusing one of the social media platform‘s
application programming interfaces (APIs), attackers claim. Meanwhile,
Meta did not deny the scrape taking place.
The API (Application Programming Interface) is how Meta (Facebook's owner company) would sell access to their massive data collection to data users have given and data Meta has collected or purchased. This type of data collection was done by "scraping".
Scraping is collecting data via APIs.
Attackers claim this is not old data offered on hacker forums, but new data. Preliminary analysis of a portion of the records indicate this is new data.
Facebook/Meta is not denied "scrapping" is occurring bit claims it has been addressing limiting scrapping.
A cyber research team analysed a sample and reported the records contain:
User IDs, names, email addresses, usernames, phone numbers, locations, birthdates, genders, and other.
The attacker's claim is still unverified.
Similar attacks against Shopify, GoDaddy, Wix, and OpenAI are reported.
A smaller data leak from Meta in 2021 of 50 million users was reported and fined by the European Union's Irish Data Protection Commission.
If confirmed Facebook user's data is copied. Quitting Facebook will not remove the copied data.
Be aware. Awareness, Preparedness, Understanding.