Quickly Build Landing Pages With Cloudy Move

Cloudy Move offers everything you need to build your custom web application. Create product inventory, send and receive payments. Sell your products and let your customers earn cashbacks and rewards. Choose any design templates, add and modify your contents and posts and be found everywhere. Sign up for free.

Facebook data breach: what happened and why it’s hard to know if your data was leaked

5/6/2021 8:31:30 PM

Facebook data breach: what happened and why it's hard to know if your data was leaked

Alon Gal/Twitter
Paul Haskell-Dowland, Edith Cowan University

Over the long weekend reports emerged of an alleged data breach, impacting half a billion Facebook users from 106 countries.

And while this figure is staggering, there’s more to the story than 533 million sets of data. This breach once again highlights how many of the systems we use aren’t designed to adequately protect our information from cyber criminals.

Nor is it always straightforward to figure out whether your data have been compromised in a breach or not.

What happened?

More than 500 million Facebook users’ details were published online on an underground website used by cyber criminals.

It quickly became clear this was not a new data breach, but an older one which had come back to haunt Facebook and the millions of users whose data are now available to purchase online.

The data breach is believed to relate to a vulnerability which Facebook reportedly fixed in August of 2019. While the exact source of the data can’t be verified, it was likely acquired through the misuse of legitimate functions in the Facebook systems.

Such misuses can occur when a seemingly innocent feature of a website is used for an unexpected purpose by attackers, as was the case with a PayID attack in 2019.

Chief technology officer of cybercrime intelligence firm Hudson Rock, Alon Gal, discovered the leaked database, posting screenshots on Twitter. Twitter

Read more: PayID data breaches show Australia's banks need to be more vigilant to hacking


In the case of Facebook, criminals can mine Facebook’s systems for users’ personal information by using techniques which automate the process of harvesting data.

This may sound familiar. In 2018 Facebook was reeling from the Cambridge Analytica scandal. This too was not a hacking incident, but a misuse of a perfectly legitimate function of the Facebook platform.

While the data were initially obtained legitimately — as least, as far as Facebook’s rules were concerned — it was then passed on to a third party without the appropriate consent from users.


Read more: We need to talk about the data we give freely of ourselves online and why it's useful


Were you targeted?

There’s no easy way to determine if your details were breached in the recent leak. If the website concerned is acting in your best interest, you should at least receive a notification. But this isn’t guaranteed.

Even a tech-savvy user would be limited to hunting for the leaked data themselves on underground websites.

The data being sold online contain plenty of key information. According to haveibeenpwned.com, most of the records include names and genders, with many also including dates of birth, location, relationship status and employer.

Although, it has been reported only a small proportion of the stolen data contained a valid email address (about 2.5 million records).

This is important since a user’s data are less valuable without the corresponding email address. It’s the combination of date of birth, name, phone number and email which provides a useful starting point for identity theft and exploitation.

If you’re not sure why these details would be valuable to a criminal, think about how you confirm your identity over the phone with your bank, or how you last reset a password on a website.

Haveibeenpwned.com creator and web security expert Troy Hunt has said a secondary use for the data could be to enhance phishing and SMS-based spam attacks.

How to protect yourself

Given the nature of the leak, there is very little Facebook users could have done proactively to protect themselves from this breach. As the attack targeted Facebook’s systems, the responsibility for securing the data lies entirely with Facebook.

On an individual level, while you can opt to withdraw from the platform, for many this isn’t a simple option. That said, there are certain changes you can make to your social media behaviours to help reduce your risk from data breaches.

1) Ask yourself if you need to share all your information with Facebook

There are some bits of information we inevitably have to forfeit in exchange for using Facebook, including mobile numbers for new accounts (as a security measure, ironically). But there are plenty of details you can withhold to retain a modicum of control over your data.

2) Think about what you share

Apart from the leak being reported, there are plenty of other ways to harvest user data from Facebook. If you use a fake birth date on your account, you should also avoid posting birthday party photos on the real day. Even our seemingly innocent photos can reveal sensitive information.

3) Avoid using Facebook to sign in to other websites

Although the “sign-in with Facebook” feature is potentially time-saving (and reduces the number of accounts you have to maintain), it also increases potential risk to you — especially if the site you’re signing into isn’t a trusted one. If your Facebook account is compromised, the attacker will have automatic access to all the linked websites.

4) Use unique passwords

Always use a different password for each online account, even if it is a pain. Installing a password manager will help with this (and this is how I have more than 400 different passwords). While it won’t stop your data from ever being stolen, if your password for a site is leaked it will only work for that one site.

If you really want a scare, you can always download a copy of all the data Facebook has on you. This is useful if you’re considering leaving the platform and want a copy of your data before closing your account.


Read more: New evidence shows half of Australians have ditched social media at some point, but millennials lag behind The Conversation


Paul Haskell-Dowland, Associate Dean (Computing and Security), Edith Cowan University

This article is republished from The Conversation under a Creative Commons license. Read the original article.

Cloudy Move offers everything you need

Committed to grow your business like never before. We offer best digital consultancy services at affordable cost.

Create once. Share everywhere.

We tailor to your needs whatever they may be. Navigating your business online couldn’t get easier.

Unlimited devices

With us your business doesn't have to social distance online. Connect with people no matter where they are.

Beautiful templates & layouts

Not sure what you need? Scroll through our blog for advice, or send us a message!

Available globally

There are many options when it comes to using digital tools, and technology is always changing.

Link wallet to earn rewards

Earn 1000 DreamozTech tokens when you sign up, earn extra 500 on referral.

Create valuable SEO content.

Our SEO platform allows you to be creative, while still helping you boost your SEO ranking.

Trend online and let the spotlight be on you.

Our web tools are now at your fingertips. With our new mobile app manage your online business at the comfort of your phone.

Professional Digital Services For Business.

Search engines allow people to look for the product or service they want, at the precise time they want it.

Cloudy Move is more than just a page builder

Build your responsive, mobile friendly, dynamic and search engine optimized web apps. Update and manage your contents instantly. Bring more traffic, use our tools and thrive in the digital world. By creating your free profile, you are one step closer to get the best results. Our SEO platform allows you to be creative, while still helping you boost your SEO ranking.

Cloudy Move is more than just a page builder Cloudy Move is more than just a page builder Cloudy Move is more than just a page builder Cloudy Move is more than just a page builder

Cloudy Move offers everything you need

It's never been easier, cheaper or more beneficial for your business to get online. Don’t be intimidated by the breadth of opportunities in digital.

Personal

$59

per month
  • 1 user
  • 10 websites
  • Access to premium templates
  • Basic support
Start free trial

Agency

$159

per month
  • 2-15 users
  • 50 websites
  • Access to premium templates
  • Priority support
Start free trial

Enterprise

$499

per month
  • Unlimited users
  • Unlimited websites
  • Access to premium templates
  • 24/7 support
Start free trial

Everything is covered when it comes to using digital tools

Websites and social media can be used to reach existing and potential customers

  • Weekly new templates
  • Access to new features
  • Mail Chimp integration
  • Stripe integration
  • Payment integration
  • Advance SEO tools
  • Free unlimited support

Cloudy Move

Our content management platform lets you manage your custom web apps at an affordable price. Interested in posting a blog or advertising a product? Cloudy Move is more than just a page builder. You are one step closer to get the best results.

Frequently asked questions

Answers to most common questions

Can I try it for free?

By creating your free profile, you are one step closer to get the best results. Sign up now!

Do you have hidden fees?

No, Do you know the basic idea of price hike for various brands in shopping malls?

What are the payment methods you accept?

Internet banking and payment options. Compare prices with brand and see the difference.

How often do you release updates?

We provide you with solutions for making engaging web apps, help in mobile support and much more!

Not being in the office shouldn't make you feel invisible?

We can be the early bird you've always wanted to be without your alarm clock.

How can I contact you?

We would be glad to help you with your further queries.

Cloudy Move
Contact us

News from Cloudy Move

What's new at Cloudy Move

Color Switcher

These are just demo colors. You can easily create your own color scheme and templates.