Incidents involving:

Facebook

Data breachResolvedApril 3, 2021

Facebook 533M scraped records leak

Data on 533 million Facebook users from 106 countries — including phone numbers, Facebook IDs, full names, locations, birthdates, and some email addresses — was posted free on a low-level hacking forum. The data had been scraped via a contact-importer flaw Facebook patched in 2019.

Victim: Facebook
Loss: $290.0M
Records: 533.0M

Social engineeringResolvedMarch 17, 2018

Facebook–Cambridge Analytica data scandal

Political consultancy Cambridge Analytica improperly obtained the personal data of up to 87 million Facebook users via a personality-quiz app, exploiting Facebook's permissive third-party API to harvest friend networks and build voter-targeting profiles. The scandal triggered a record $5 billion FTC penalty.

Victim: Facebook
Loss: $5.00B
Records: 87.0M