ENKR

Facebook Cambridge Analytica data harvesting

Add to my breach check

Made public · 87,000,000 people at most

What leaked8

Hard to replace

  • Email address
  • Other profile data
  • Social media profile

Permanent

  • Photos
  • Private messages
  • Date of birth
  • Full name
  • Gender
  • Photosphotos the person was tagged in; app users and, where their settings allowed, their friends
  • Private messagesFacebook messages; app users only, depending on their settings
  • Date of birthapp users and, where their settings allowed, their friends
  • Email addressapp users only, depending on their settings
  • Full nameapp users and, where their settings allowed, their friends
  • Genderapp users and, where their settings allowed, their friends
  • Other profile datacurrent city, if set on the profile; app users and, where their settings allowed, their friends
  • Social media profileFacebook profile and pages liked · app users and friends; timeline and news feed posts and friends lists · app users

To-dos2 · about 35 min in all

  1. If threatened: do not pay, keep the messages, report it to the policeabout 30 minfreeLimits harm from: extortion with private data
  2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: phishing messages

What happened next10 events

  1. Undetected 2 eventsabout 1 yr 10 mo · show events
  2. Response 3 eventsNotice in 860 days · show events
  3. RemedyNone on record
  4. Penalty 3 eventsFine $5B · show events
  5. Disputes 2 eventsJudgment · show events
  1. Judge ordered Meta to pay New Mexico 25 billion USD; Meta said it expects to prevail on appeal
  2. A jury found Meta liable for over 43 million violations of New Mexico consumer protection law over misleading statements about users' data
  3. Facebook withdrew its appeal against the ICO fine under a settlement and paid it in full
  4. Facebook agreed to a 5 billion USD penalty and new privacy restrictions to settle FTC charges that it violated a 2012 order
  5. ICO fined Facebook 500,000 GBP, the maximum under the Data Protection Act 1998
5 more
  1. Link at the top of News Feed showing each person's apps and whether their data may have gone to Cambridge Analytica
  2. Put the number of affected people at up to 87 million, mostly in the U.S.
  3. Suspended Cambridge Analytica and its parent SCL from Facebook after reports that the data had not been deleted
  4. Misuse of the data harvested by the app was discovered · ICO
  5. Intrusion began
Company
Facebook
When it happened
Company detected it
Made public
Notice
Leak confirmed
Affected
87,000,000 people at most · Facebook's estimate, mostly in the U.S.; at least 1 million in the UK · ICO

Sources