Facebook has confirmed that more than 50 million user accounts have been breached. They made the announcement today, Friday, September 28th. However, their engineering team discovered the security breach back on Tuesday, September 25th, 2018. They tell us that the vulnerability has been fixed and the breach was reported to the appropriate authorities.
How Did This Happen?
Hackers stole usersâ access tokens through Facebookâs âview as.â This is a feature that lets you view what your profile looks like to other Facebook users. The flaw in this feature allowed hackers to take over 50 million user accounts.
If youâre like me, you may have received notices from some of your Facebook friends this week that someone took control of their accounts. Perhaps they were affected by this breach.
What Are Access Tokens?
These are the digital keys that keep us logged in so we donât need to re-enter our password every time we use Facebook. With this information, hackers can take over our account.
Hereâs how Facebook explains what happened:
âAttackers exploited a vulnerability in Facebookâs code that impacted âView As,â a feature that lets people see what their own profile looks like to someone else. This allowed them to steal Facebook access tokens which they could then use to take over peopleâs accounts.â
What Now?
Facebook reset the tokens of all those affected. They also logged off 40 million additional users as a precaution. If you are one of these people, youâll need to log back in the next time you use Facebook.
According to Facebook, their investigators are in the early stages of their investigation. They are temporarily turning off the âView Asâ feature while they conduct a thorough security review
What Should You Do?
If you have trouble logging back into Facebook, or you forgot your password, visit Facebookâs Help Center.
If youâre like me, you take extra precautions when you hear about breaches like this. If you want, you can visit the âSecurity and Loginâ section in Facebook settings. It lists the places where youâre logged into Facebook with a one-click option. If you choose, you can log out of them all.
ICS is a Texas-based 37-year-old technology company specializing in Managed IT, VoIP, Video Conferencing and Video Surveillance solutions for US and International businesses. ICS has over 4000 regional installations and specializes in multi-site businesses between 25 and 2500 employees. ICS’s customers enjoy the experience of ICS’s Total Care program which provides clients flat fee services with obsolesence and growth protection. Whether a customer elects to deploy their IT, Video Conferencing or VoIP in the cloud or on the customer’s premise, ICS can provide a full turn-key solution for our clients under one flat monthly fee.
ICS Specializes In Managed IT Services, Business Telephones, Video Conferencing & More.
Book your initial consultation with ICS using the form below.
ICS will never sell, rent, share or distribute your personal details with anyone. In addition, we will never spam you.