IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

100 million Facebook user info scraped

Around 100 million Facebook users have had some of their data scraped from the site and placed in a torrent file.

Facebook

Facebook has been hit by another privacy setback, after around 100 million users had personal information taken off of the site and placed into a publicly downloadable file.

Ron Bowes, from Skull Security, has included the URL of every searchable Facebook users' profile into the torrent, along with their names.

Facebook has been quick to point out all the information taken was publicly available something which the users have consented to.

"In this case, information that people have agreed to make public was collected by a single researcher," a spokesperson said.

"This information already exists in Google, Bing, other search engines, as well as on Facebook. No private data is available or has been compromised."

The spokesperson added: "Similar to a phone book, this is the information available to enable people to find each other, which is the reason people join Facebook. If someone does not want to be found, we also offer a number of controls to enable people not to appear in search on Facebook, in search engines, or share any information with applications."

Bowes carried out his Facebook data harvesting by creating a crawler which scraped the information from the social network's open directory.

"This is a scary privacy issue. I can find the name of pretty much every person on Facebook," Bowes claimed in a cached blog post.

Bowes said he only indexed searchable users and not their friends, but gaining this extra information was possible.

"Getting their friends will be significantly more data to process, and I don't have those capabilities right now," he added.

While the data was evidently publicly available, Bowes' efforts will do the social networking giant no favours considering the scrutiny Facebook has faced over privacy issues of late.

Rik Ferguson, senior security advisor at Trend Micro, said whilst people can opt out of being indexable on Facebook, this choice has "disappeared" for the users whose information was placed in the torrent file by Bowes.

"It was kind of irresponsible to post that data on a publicly available torrent," Ferguson told IT PRO.

He said it takes a big event to get people's attention and make them think about privacy issues.

"This is an event of some magnitude it's a fifth of the Facebook population," Ferguson added.

Featured Resources

Four strategies for building a hybrid workplace that works

All indications are that the future of work is hybrid, if it's not here already

Free webinar

The digital marketer’s guide to contextual insights and trends

How to use contextual intelligence to uncover new insights and inform strategies

Free Download

Ransomware and Microsoft 365 for business

What you need to know about reducing ransomware risk

Free Download

Building a modern strategy for analytics and machine learning success

Turning into business value

Free Download

Recommended

Meta hit with €17 million fine over multiple GDPR breaches
data protection

Meta hit with €17 million fine over multiple GDPR breaches

16 Mar 2022
The secure cloud configuration imperative
Whitepaper

The secure cloud configuration imperative

7 Mar 2022
The secure cloud configuration imperative
Whitepaper

The secure cloud configuration imperative

7 Mar 2022
Meta says Apple's iOS privacy changes will cost it $10 billion in 2022
privacy

Meta says Apple's iOS privacy changes will cost it $10 billion in 2022

3 Feb 2022

Most Popular

Russian hackers declare war on 10 countries after failed Eurovision DDoS attack
hacking

Russian hackers declare war on 10 countries after failed Eurovision DDoS attack

16 May 2022
Researchers demonstrate how to install malware on iPhone after it's switched off
Security

Researchers demonstrate how to install malware on iPhone after it's switched off

18 May 2022
Windows Server admins say latest Patch Tuesday broke authentication policies
Server & storage

Windows Server admins say latest Patch Tuesday broke authentication policies

12 May 2022