419M user records on exposed server

2019 419.0M records affected

Data compromised

Phone numbers

Technical writeup

Unsecured server held Facebook ID, phone number, and in some cases name, country, gender for 419M users. Server not Facebook's; eventually taken down.

Root cause

Third-party exposed server; scraped data.

References

https://about.fb.com/news/category/security/