Data Exposed on Amazon Cloud Service: Facebook Has Messed Up Again

Data Exposed on Amazon Cloud Service: Facebook Has Messed Up Again

Facebook is in trouble again.

Facebook, the world's most popular social media platform, is again in trouble. The third-party Facebook app developers have uploaded the personal information of millions of Facebook users on publicly accessed cloud servers. The data which was meant to be protected was available for easier access for anyone searching the web.

This major data breach was uncovered by a cyber-security research firm UpGuard. According to the researchers of UpGuard, they have found the data of millions of Facebook users online that have been uploaded by a Mexican social media company known as Cultura Colectiva. The data included usernames, IDs, and activities of users on the platform and that too in the plain sight.

The personal data of Facebook users including their identities and personal photos were also found on another Mexico-based app, the Pool. This app was created for the sole purpose of helping people to meet with each other and is no more functional since 2014.

After the confirmation of data breach by the Mexican sites, UpGuard has sent notifications to both Cultura Colectiva as well as Amazon about the violations of data privacy. The notice was sent earlier in January but no action was taken by the said platforms after which the security team contacted Facebook on Wednesday.

As soon as Facebook was contacted about the violation, all the data on Amazon was secured instantly while the data on the Pool went offline silently. Though Facebook has taken immediate action it is still uncertain how many people have already accessed the information from cloud servers and how much of the data is used illegally.

This is not the first time Facebook is held guilty of handing over the data to third-party app developers. There were several instances in the past when Facebook data was found with various researchers and advertisers. Facebook is already under constant criticism since the 2016 election when the data of approx. 87 million Facebook users were accessed by Cambridge Analytica for Trump Election Campaign and this present major data breach by Mexico-based social media sites has further worsened the situation.

Facebook has recently revised its data protection policies and has assured that there will be no transition of users' data to any third party. They claim that they strongly prohibit the storing of Facebook data on any public platform and have taken immediate action when it came to their notice. But whether it is a mistake or intentional breach, this major data breach has made every Facebook user concerned about their data protection and social media security.

According to UpGuard, Facebook seems to be incompetent in controlling its vast network and needs to take some serious security measures for the protection of its users` data from any leakage and unauthorized use. People all over the world are curious about what will be the stance of the app developer over the situation? Whether they will be able to defend themselves? What is the future of Facebook?

About the Author

Anas Baig is a Security Journalist covers most of the Cyber Security & Tech news. He is a security professional and writer specializing in Science and Technology, with a passion for dinosaurs, archaeology, robots, cars and animals great and small.

Featured

  • Maximizing Your Security Budget This Year

    Perimeter Security Standards for Multi-Site Businesses

    When you run or own a business that has multiple locations, it is important to set clear perimeter security standards. By doing this, it allows you to assess and mitigate any potential threats or risks at each site or location efficiently and effectively. Read Now

  • New Research Shows a Continuing Increase in Ransomware Victims

    GuidePoint Security recently announced the release of GuidePoint Research and Intelligence Team’s (GRIT) Q1 2024 Ransomware Report. In addition to revealing a nearly 20% year-over-year increase in the number of ransomware victims, the GRIT Q1 2024 Ransomware Report observes major shifts in the behavioral patterns of ransomware groups following law enforcement activity – including the continued targeting of previously “off-limits” organizations and industries, such as emergency hospitals. Read Now

  • OpenAI's GPT-4 Is Capable of Autonomously Exploiting Zero-Day Vulnerabilities

    According to a new study from four computer scientists at the University of Illinois Urbana-Champaign, OpenAI’s paid chatbot, GPT-4, is capable of autonomously exploiting zero-day vulnerabilities without any human assistance. Read Now

  • Getting in Someone’s Face

    There was a time, not so long ago, when the tradeshow industry must have thought COVID-19 might wipe out face-to-face meetings. It sure seemed that way about three years ago. Read Now

    • Industry Events
    • ISC West

Featured Cybersecurity

Webinars

New Products

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols. 3

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file. 3

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame. 3