Changes underway at Facebook.

Changes underway at Facebook.

50 million Facebook accounts affected by security breach

Social media giant says it has taken steps to fix the security problem and alerted law enforcement

Facebook says it recently discovered a security breach affecting nearly 50 million user accounts.

The hack is the latest setback for Facebook during a year of tumult for the global social media service.

In a blog post , the company says hackers exploited a bug that affected its “View As” feature, which lets people see what their profiles look like to someone else. That would let attackers steal the “access tokens” Facebook uses to keep people logged in. Possession of those tokens would allow attackers to “seize control” of user accounts, Facebook said.

Facebook says it has taken steps to fix the security problem and alerted law enforcement.

To deal with the issue, Facebook reset some logins, so 90 million people have been logged out and will have to log in again. That includes anyone who has been subject to a “View As” lookup in the past year.

Facebook says it doesn’t know who is behind the attacks or where they’re based. In a call with reporters on Friday, CEO Mark Zuckerberg said that the company doesn’t know yet if any of the accounts that were hacked were misused.

Jake Williams, a security expert at Rendition Infosec, said the stolen access tokens would have likely allowed attackers to view private posts and probably post status updates or shared posts as the compromised user, but wouldn’t affect passwords.

“The bigger concern (and something we don’t know yet) is whether third party applications were impacted,” Williams said in a text exchange. “Facebook offers a login service for third parties to allow users to log into their apps using Facebook. In other words, Facebook is providing the identity management for countless other sites and services. These access tokens that were stolen show when a user is logged into Facebook and that may be enough to access a user’s account on a third party site.

News broke early this year that data analytics firm that once worked for the Trump campaign, Cambridge Analytica, had gained access to personal data from millions of user profiles. Then a congressional investigation found that agents from Russia and other countries have been posting fake political ads since at least 2016. Facebook CEO Mark Zuckerberg appeared at a Congressional hearing over Facebook’s privacy policies in April.

Facebook has more than 2 billion users worldwide. The company said people do not need to change their Facebook passwords, but anyone having trouble logging on should visit the site’s help centre . Those who want to log out can visit the “Security and Login” section of their settings, which lists the places that people are logged into Facebook. It has a one-click option of logging out of all locations.

Ed Mierzwinski, the senior director of consumer advocacy group U.S. PIRG, said the breach was “very troubling.”

“It’s yet another warning that Congress must not enact any national data security or data breach legislation that weakens current state privacy laws, preempts the rights of states to pass new laws that protect their consumers better, or denies their attorneys general rights to investigate violations of or enforce those laws,” he said in a statement.

Wedbush analyst Michael Pachter said “the most important point is that we found out from them,” meaning Facebook, as opposed to a third party.

“As a user, I want Facebook to proactively protect my data and let me know when it’s compromised,” he said. “Shareholders should ultimately approve of Facebook’s handling of the issue.”

Related: Facebook uncovers new global misinformation operations

Related: B.C. firm linked to Facebook data scandal defends its political work

The Associated Press

Like us on Facebook and follow us on Twitter.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

A Chilliwack Search and Rescue truck heads down Vedder Road towards Cultus Lake to assist a dirtbiker with a broken leg. (Paul Henderson/ Chilliwack Progress)
Emergency crews, SAR busy with three separate outdoor recreation incidents in Chilliwack area

Calls in 1 afternoon include ATV collision, parachuter who fell from tree, dirtbiker with broken leg

Chilliwack’s historic Royal Hotel is offering COVID-style wedding packages for two weeks in June. (Facebook/ Royal Hotel Chilliwack)
Chilliwack hotel offers pop-up, COVID-style weddings for 2 weeks this June

‘Weddings can still happen, albeit in a different fashion,’ says Laura Reid of Royal Hotel

Nick Warmerdam and his dog Diesel are inviting locals to check out the Lakeland Farm U-pick Flower Farm this spring. (Ben Lypka/Abbotsford News)
VIDEO & SLIDESHOW: Abbotsford’s Lakeland Flowers opens for spring

Tulip farm attraction opened on April 14, open to the public daily seven days a week

A man holds a child while speaking with RCMP following an erratic driving incident on Highway 1 in Chilliwack on Friday, April 16, 2021. The child and a woman (but not this man) were in this Jeep Grand Cherokee which hit a barrier and a parked car on Highway 1 and continued driving. The vehicle finally exited the highway at Yale Road West and came to a stop. (Jenna Hauck/ Chilliwack Progress)
Video captures woman driving erratically with child after hitting barrier, car on Hwy 1 in Chilliwack

Smoke seen coming from SUV as it continues to travel eastbound of shoulder of highway

Video image
UPDATE: Bridge traffic moving normally after high-velocity crash involving logging truck

Northbound crash occurred at approximately 2 p.m., involves 6 vehicles, north lanes shut down

Vancouver resident Beryl Pye was witness to a “concerning,” spontaneous dance party that spread throughout social groups at Kitsilano Beach on April 16. (Screen grab/Beryl Pye)
VIDEO: Dance party erupts at Vancouver’s Kitsilano Beach to the dismay of onlookers

‘It was a complete disregard for current COVID-19 public health orders,’ says Vancouver resident Beryl Pye

Lord Tweedsmuir’s Tremmel States-Jones jumps a player and the goal line to score a touchdown against the Kelowna Owls in 2019. The face of high school football, along with a majority of other high school sports, could significantly change if a new governance proposal is passed at the B.C. School Sports AGM May 1. (Malin Jordan)
Power struggle: New governance model proposed for B.C. high school sports

Most commissions are against the new model, but B.C. School Sports (BCSS) and its board is in favour

Pall Bearers carrying the coffin of the Duke of Edinburgh, followed by the Prince of Wales, left and Princess Anne, right, into St George’s Chapel for his funeral, at Windsor Castle, in Windsor, England, Saturday April 17, 2021. (Danny Lawson/Pool via AP)
Trudeau announces $200K donation to Duke of Edinburgh award as Prince Philip laid to rest

A tribute to the late prince’s ‘remarkable life and his selfless service,’ the Prime Minister said Saturday

B.C. homeowners are being urged to take steps to prepare for the possibility of a flood by moving equipment and other assets to higher ground. (J.R. Rardon)
‘Entire province faces risk’: B.C. citizens urged to prepare for above-average spring flooding

Larger-than-normal melting snowpack poses a threat to the province as warmer weather touches down

Vancouver-based Doubleview Gold Corp. is developing claims in an area north of Telegraph Creek that occupies an important place in Tahltan oral histories, said Chad Norman Day, president of the Tahltan Central Government. (THE CANADIAN PRESS/HO)
B.C. Indigenous nation opposes mineral exploration in culturally sensitive area

There’s “no way” the Tahltan would ever support a mine there, says Chad Norman Day, president of its central government

Stz’uminus Elder George Harris, Ladysmith Mayor Aaron Stone, and Stz’uminus Chief Roxanne Harris opened the ceremony. (Cole Schisler photo)
Symbolic red dresses rehung along B.C. highway after vandals tore them down

Leaders from Stz’uminus First Nation and the Town of Ladysmith hung new dresses on Sat. April 17

A Western toadlet crosses the centre line of Elk View Road in Chilliwack on Aug. 26, 2010. A tunnel underneath the road has since been installed to help them migrate cross the road. Saturday, April 24 is Save the Frogs Day. (Jenna Hauck/ Progress File)
Unofficial holidays: Here’s what people are celebrating for the week of April 18 to 24

Save the Frogs Day, Love Your Thighs Day and Scream Day are all coming up this week

Local carpenter Tyler Bohn embarked on a quest to create the East Sooke Treehouse, after seeing people build similar structures on a Discovery Channel show. (East Sooke Treehouse Facebook photo)
PHOTOS: B.C. carpenter builds fort inspired by TV’s ‘Treehouse Masters’

The whimsical structure features a wooden walking path, a loft, kitchen – and is now listed on Airbnb

Cannabis bought in British Columbia (Ashley Wadhwani/Black Press Media)
Is it time to start thinking about greener ways to package cannabis?

Packaging suppliers are still figuring eco-friendly and affordable packaging options that fit the mandates of Cannabis Regulations

Most Read