LONDON – According to an *official statement bylink* thehackers stole access tokens for 30 million accounts, which allowed them togain complete access to the profiles. The hackers accessed basic contactinformation such as name, email address or phone number of over 30 millionaccounts.
Apart from this, hackers also accessed additional information such asgender, religion, location and device information from another 15 millionaccounts.
“We’re cooperating with the FBI, which is actively investigating and askedus not to discuss who may be behind this attack,” Facebook said on a blogpost. It also added that the attack did not include Instagram, FacebookMessenger, WhatsApp, Oculus, WorkPlace, Pages, Payments and third-partyapps/advertising.
Hackers took advantage of a “complex interaction” between three softwarebugs, which required a degree of sophistication. The vulnerability wascreated by a change to a video uploading feature in July of 2017.
It involved a flaw in a “See As” feature that showed Facebook what theirprofiles look like to other people at the social network. Using the featuregenerated digital keys, called “access tokens,” which let users stayconnected to their accounts without having to enter passwords anew.






