Facebook Privacy Breach
On September 28, Facebook Inc. (“Facebook”) announced that approximately 50 million user accounts worldwide may have been compromised in a massive security breach. Facebook has confirmed that, during the breach, millions of user accounts were hacked via a series of vulnerabilities in Facebook’s code relating to a video upload tool and the “View As” privacy tool. The hackers took advantage of these vulnerabilities to steal user access tokens and thus were able to “seize control” of affected user accounts. Although Facebook discovered the breach on September 25, 2018, the video upload tool has been available on Facebook since July 2017.
While the hackers had control of the breached user accounts, they had all of the powers the user had – i.e. they were able to post as the user, and to access all of the information that the users had uploaded to Facebook, as well as all of the information accessible to the users, including the private information of their friends which is not publicly available. Facebook has also confirmed that the hackers had the ability to use the stolen user access tokens to gain control of accounts on other websites (such as Instagram, Etsy, Airbnb, or Spotify) which permit users to log in using their Facebook account credentials.
Many Canadians who use Facebook were affected. Affected users should have been logged out of their Facebook accounts without warning, and received a message at the top of their News Feed when they logged back in, which stated: “Your privacy and security are important to us. We want to let you know about recent action we've taken to secure your account.”
Facebook’s Public Statement
View Facebook’s post originally published on September 28, 2018 here
Facebook Privacy Breach Class Action
Charney Lawyers PC has commenced a national privacy breach class action on behalf of all Canadians whose Facebook account credentials were stolen during the breach announced on September 28, 2018. The plaintiff asserts that Facebook failed to properly protect its users’ personal, private information.
Register for the Facebook Privacy Breach Class Action
All Canadians who were affected by the Facebook breach are encouraged to register to receive more information about the class action by emailing firstname.lastname@example.org