There are records for more than 32 million accounts in the United States, 11 million in the United Kingdom and 6 million in India, according to Alon Gal, CTO of cyber intelligence firm Hudson Rock.
In some cases, details include full name, location, birthday, email addresses, phone number and relationship status, he said.
Hudson Rock showed CNN Business the phone numbers of two of our senior staff members, which are included in the database.
The leak was first reported by the Insider news site.
“These are old data that was previously reported in 2019. We found and fixed this issue in August 2019,” Facebook spokesman Andy Stone told CNN on Saturday.
Facebook did not say whether it notified the affected users then.
Stone added: “In 2019, we eliminated people’s ability to find others directly using their phone numbers on both Facebook and Instagram – a feature that could be exploited using sophisticated software code to mimic Facebook. and provide a phone number to find the users it belonged to. la. ”
Although these data are from 2019, they could still be valuable to hackers and cybercriminals, such as those who engage in identification theft.
Hudson Rock’s Alon Gal pointed out on Twitter that the way the data was sorted and posted on the hacking site this week makes it more accessible for the exploitation of criminals.
Rachel Tobac, an ethical hacker and CEO of SocialProof Security, told CNN: “These are pieces of data that cybercriminals spend their time looking for to carry out social engineering attacks (a type of hacking) – but now they’re all in one place and easily accessible in this drain, which makes social engineering faster and easier. “
