The alleged data is being sold on one of the most popular hacking-related forums online. The data contains the usernames, emails, phone numbers, location, sex, and ID of affected users according to reports. If the information being sold is confirmed to be credible and authentic then it’ll likely be one of the largest data dumps in recent Facebook history. There is currently no known link between this leak and the recent global outage of Facebook and related companies.
Who is buying it and how?
The data was obtained through a process called data scraping rather than hacking. Data scraping is a process of extracting publicly available data from the web and organizing it into lists and databases. It is then sold to scammers, unethical marketers, state agents, organized crime syndicates, and other shady individuals and groups.
Why is this dangerous?
Phone numbers, location, and users’ full names allow criminals to select their targets more accurately. The scraped data can be used to coordinate phishing attacks, social engineering attacks, spam attacks, or offline attacks.
How to protect yourself
Facebook users are encouraged to delete their accounts or set them to private to prevent further data scraping. Users are also encouraged not to enter random quizzes, surveys, or games from unknown and unverified publishers.