Who: Facebook

When: April 3,​ 2019

# of records involved: 540 Million records

What happened: Two third-party companies that had collected Facebook data on their own servers.

How did it happen: Two Amazon cloud servers storing over 540 million Facebook-related records that have been collected by two third-party companies. The number of affected users is believed to be in the range of millions and tens of millions. A Mexico-based online media platform operating across Spanish-speaking Latin America countries. The second AWS server stored data recorded by the “At the Pool” Facebook game.

Outcome: Facebook has lost control over its most important asset –its users’ data– which is now leaking left and right from all the no-name companies and mom-and-pop developer firms who’ve collected it over the past few years.