Facebook

In April 2021 a massive dataset containing information on over 533 million Facebook users from 106 countries was posted for free on a hacking forum. The breach resulted from the exploitation of a vulnerability in the Facebook contact importer tool which allowed attackers to scrape user profiles. The vulnerability was patched by Facebook in August 2019 but the scraped data continued to circulate in private circles before being released publicly. The leaked information is highly sensitive as it links mobile phone numbers to identity details which facilitates smishing and SIM swapping attacks.