Third Party Vendors Store Facebook Data on Unencrypted AWS Server
When: April 3, 2019
# of records involved: 540 Million records
What happened: Two third-party companies that had collected Facebook data on their own servers.
How did it happen: Two Amazon cloud servers storing over 540 million Facebook-related records that have been collected by two third-party companies. The number of affected users is believed to be in the range of millions and tens of millions. A Mexico-based online media platform operating across Spanish-speaking Latin America countries. The second AWS server stored data recorded by the “At the Pool” Facebook game.
Outcome: Facebook has lost control over its most important asset –its users’ data– which is now leaking left and right from all the no-name companies and mom-and-pop developer firms who’ve collected it over the past few years.