According to the research conducted by UpGuard, millions of Facebook records are exposed on publicly accessible Amazon’s cloud servers. The data was uploaded by third-party companies that work with Facebook.
The data array was found in the form of an open database on Amazon servers — it contained identification numbers, comments, reactions, and account names.The data was collected by Mexico City-based media company Cultura Colectiva, which produces materials for social networks.
UpGuard also found a database of now-defunct app called At the Pool with names, email addresses and passwords of 22 thousand users. It is not known how long she remained public.
For years, Facebook provided extensive customer information to advertisers and partners, and while the company has since cracked down on the amount of data it shares, the previously obtained information is still widely available.
“The public doesn’t realize yet that these high-level systems administrators and developers, the people that are custodians of this data, they are being either risky or lazy or cutting corners,” said Chris Vickery, director of cyber risk research at UpGuard.