Facebook hacked, but user data ‘not compromised’

Feb 16, 2013

Facebook Inc said on Friday that it been the target of a series of attacks by an unidentified hacker group, but it had found no evidence that user data was compromised.

“Last month, Facebook security discovered that our systems had been targeted in a sophisticated attack,” the company said in a blog post posted on Friday afternoon, just before the three-day Presidents Day weekend. “The attack occurred when a handful of employees visited a mobile developer website that was compromised.”

The social network, which says it has more than one billion active users worldwide, also said: “Facebook was not alone in this attack. It is clear that others were attacked and infiltrated recently as well.”

Hacked! AP

Hacked! AP

Facebook’s announcement follows recent cyber attacks on other prominent websites. Twitter, the microblogging social network, said earlier this month that it had been hacked, and that approximately 250,000 user accounts were potentially compromised, with attackers gaining access to information including user names and email addresses.

Newspaper websites, including those of The New York Times, The Washington Post and The Wall Street Journal, have said they have also been infiltrated. Those attacks were attributed by the news organizations to Chinese hackers targeting their coverage of China.

While Facebook said that no user data was compromised, the incident could raise consumer concerns about privacy and the vulnerability of personal information stored within the social network.

Facebook has experienced several privacy missteps over the years for the way it handles user data, and settled a privacy investigation with federal regulators in 2011.

Facebook said it spotted a suspicious file and traced it back to an employee’s laptop. After conducting a forensic examination of the laptop, Facebook said it identified a malicious file, then searched company-wide and identified “several other compromised employee laptops.”

The company also said it identified a previously unseen exploit to bypass its built-in cyberdefenses, and that new protections were added on February 1.

Reuters

Firstpost encourages open discussion and debate, but please adhere to the rules below, before posting. Comments that are found to be in violation of any one or more of the guidelines will be automatically deleted:

Personal attacks/name calling will not be tolerated. This applies to comments directed at the author, other commenters and other politicians/public figures

Please do not post comments that target a specific community, caste, nationality or religion.

While you do not have to use your real name, any commenters using any Firstpost writer's name will be deleted, and the commenter banned from participating in any future discussions.

Comments will be moderated for abusive and offensive language.

Please read our comments and moderation policy before posting