Facebook’s security has been exploited once again according to the evidencefound by a security researcher, Alon Gal. The researcher has found that auser gained access to the phone numbers associated with users’ Facebookaccounts and has now put them up for sale using a Telegram bot. The botreportedly has the information of more than 500 million users.
The data was reportedlylinkleakedin 2019 through a vulnerability that was fixed in August 2019. However, adatabase was subsequently found that had the phone numbers of more than 500million users.
Now the owner of the database has created a bot on Telegram that makes itvery easy to retrieve the phone number associated with an account for asmall fee i.e. one credit that is worth $20.
The database contains the phone numbers of users from more than 100countries including the US, Canada, and the UK. If you added a phone numberto Facebook before 2019, you might have been affected by the breach aswell. The bot selling the users’ phone numbers has been live since January12, 2021. Even though it contains the phone numbers from 2019, it is stilla huge breach of privacy that impacts Facebook once again.