Facebook: Most users might have had their public data ‘scraped’

NEW YORK – Facebook’s acknowledgment that most of its 2.2 billion members have probably had their personal data scraped by “malicious actors” is the latest example of the social network’s failure to protect its users’ data.

Not to mention its seeming inability to even identify the problem until the company was already embroiled in scandal.

CEO Mark Zuckerberg told reporters Wednesday that Facebook is shutting down a feature that let people search for Facebook users by phone number or email address. Although that was useful for people who wanted to find others on Facebook, it turns out that unscrupulous types also figured out years ago that they could use it identify individuals and collect data off their profiles.

The scrapers were at it long enough, Zuckerberg said, that “at some point during the last several years, someone has probably accessed your public information in this way.”

The only way to be safe would have been for users to deliberately turn off that search feature several years ago. Facebook had it turned on by default.

“I think Facebook has not been clear enough with how to use its privacy settings,” said Jamie Winterton, director of strategy for Arizona State University’s Global Security Initiative.

The breach was a stunning admission for a company already reeling from allegations that the political data-mining firm Cambridge Analytica inappropriately accessed data on as many as 87 million Facebook users to influence elections.