Facebook Stored Millions of Unencrypted Passwords

[engine]

According to a report, Facebook has stored between 200 million, and 600 million user passwords unecrypted, and the data was searchable within Facebook's employees.

Can the bad news about security an privacy get any worse for Facebook!

Facebook is probing a series of security failures in which employees built applications that logged unencrypted password data for Facebook users and stored it in plain text on internal company servers. That’s according to a senior Facebook employee who is familiar with the investigation and who spoke on condition of anonymity because they were not authorized to speak to the press.

The Facebook source said the investigation so far indicates between 200 million and 600 million

[krebsonsecurity.com...]

Earlier stores
Facebook Receives Criticism Over Phone Number "Look-Up" [webmasterworld.com]
Report: F.T.C. and Facebook Negotiating Multi-Billion Dollar Fine Over its Privacy Practices [webmasterworld.com]
Facebook, WhatsApp and Instagram Data Unification Stopped in Germany [webmasterworld.com]
Facebook Comes Under Fire Again For Use of Access to User Data [webmasterworld.com]
Facebook Appeals £500,000 UK Regulator Fine Over Cambridge Analytica [webmasterworld.com]

[NickMNS]

"We messed, we are going to do better, we're sorry." says Zuck again....

At this point he should just create a bot version of himself that he can send on a continuous apology tour. The bot may actually come across as being more sincere than the real thing.

[tangor]

One wonders what the employees might have done with access to such info. Inquiring minds want to know.

[engine]

Facebook confirmed that they have no evidence that the passwords were leaked. However, the sheer number of employees that had access to the data might be an issue in time to come.

The company said...

We have fixed these issues and as a precaution we will be notifying everyone whose passwords we have found were stored in this way.

[newsroom.fb.com...]

[mcneely]

We offer social media management services here for our clients that want it, and this weekend Facebook was quite effectively dumped from the list.
I don't have the time -- Granted, every social platform is going to have it's own fair share of issues, but this whole Facebook deal is getting to be a bit over the top, and I'm just not interested in helping to support a platform that continues to play fast and loose with it's user base in such a fashion.

I'll be looking at Facebook in much the same way as I looked at MySpace going forward --

[Steven29]

Funny that people still dont get it.. their address is 1 Hacker Way, Menlo Park, 94025... do you think they named it that because they stop hackers?

[engine]

Facebook updates its post from earlier in this thread and it now seems million of Instagram users were affected, and not tens of thousands, as previously believed.

(Update on April 18, 2019 at 7AM PT: Since this post was published, we discovered additional logs of Instagram passwords being stored in a readable format. We now estimate that this issue impacted millions of Instagram users.

[newsroom.fb.com...]

Is this hiding the announcement by putting an update on the March 21, post.

How many holes is FB digging!