The Cybersecurity 202: A massive Facebook breach underscores limits to current data breach notification laws
Tonya Riley
with Aaron Schaffer
Lawmakers and privacy experts are slamming Facebook for its handling of a leak of more than 500 million users' personal information that was posted online for free.
The stolen data, first spotted by cybercrime intelligence firm Hudson Rock, stems from a 2019 vulnerability the company fixed at the time, a Facebook spokesperson said. No data from after the vulnerability was fixed is included, the spokesperson added.
But the company doesn't appear to have notified users about the attack in 2019 — or since the massive data set appeared online free late last month. Facebook declined to answer if it had ever informed affected users of the breach.