Facebook data breach - 533 million users data leaked, 6 million Indian's data in breach

D C

Adept
533 million Facebook user’s data breach, 6 million Indians in data, 15.2GB data

magnet link
magnet:?xt=urn:btih: 0595273ab674e05131a757f69f494a4285b429aa&dn=Facebook%20Leak%20%5b2
019%5d%5b533M%20Records%5d%5b106%20Countries%5d

Torrent file
https://www.torrentfunk.com/torrent/38011576/facebook-leak-2019533m-records106-countries.html

Virus total scan
https://www.virustotal.com/gui/file...deb7caf8631db231c3a06d3208aebd69cbbe9/summary

Surprisingly, doesnt have much Indian data, just 6 million out of 533 million. Sorted by mobile numbers, most of them are 72xxx, 82xxx and 84xxx mobile numbers.

If you dont want raw data and just want to search your details, haveibeenpwned has included that data in their database now.
Can also check on https://facebookbreach.com/ (made by nextdns)

Edit: this breach occured in 2019. More news here
https://www.bleepingcomputer.com/ne...k-users-phone-numbers-leaked-on-hacker-forum/
Top 5 countries by leaked users are Egypt, Tunisia, Italy, USA and Saudi Arabia.
 
Last edited:
After the leak was live, my friend messaged me about his information being on the list and showed a screencap. Shit's unreal.
 
And another data breach from Lord Z's Facebook. Not the first and it won't be the last. And as always, nothing will be done about it. Because lets face it, these companies make their money of monetizing our data. And we do keep feeding it an absolute untold TB of cat pics and doggo vids. /s

I think we, as users of these social media platforms, must understand and accept that any data we put out on the internet will be breached somewhere and sometime. No so called security is perfect. Maybe once everything goes onto the block chain we could expect some amount of privacy. But with these companies actively monetizing our data, someone is bound to hack and leak it all.
 
In general, it is best to check https://haveibeenpwned.com/

I am unaffected by this leak since I deleted my FB account 5 years back but look at the esteemed list my email address is in. Of course, this is a public-facing address protected by MFA and a separate 10+ character password that I don't use for anything private, but just shows how poor companies are at handling data.

Thankfully, my mobile number is not present in any list, yet.

20210408_152603.jpg
 
Last edited:
Sometime prior to FB's IPO, there was a research saying those who are not using FB may have psychological issues.

Now tried to find news on that research, but can only see contrary reports. lol.
 
I should add that one of my cards was used for a transaction on FB NZ marketplace but I got the transaction reversed within 24 hours through the card issuer and also complained to FB about the same. Probably came through one the above leaks. That is generally the main concern, especially as apps/sites shouldn't be storing the CVV which apparently some of them do.
Sometime prior to FB's IPO, there was a research saying those who are not using FB may have psychological issues.

Now tried to find news on that research, but can only see contrary reports. lol.
One of the worst things is that FB has repeatedly mentioned that they have clamped down on scraping of FB data by third parties after the Cambridge Analytica scandal but in the case of this leak, they have again shifted the blame on third parties for scraping their data.

In short, FB continues to turn a blind eye to third party users scrapping their data through their API as long as they get paid a premium for allowing the same. It makes FB significantly worse than any other Big Tech company because they are immoral by design and choice. Quite fortunate, that they have a captive user base across their products.
 
Last edited:
As an Indian, our govt. told us privacy is not an absolute right and,

Quietly, Govt Sold Vehicular Bulk Data to Firm Without Price Discovery, Privacy Protection

Fast Lane Automotive developed a business model offering technological solutions based on this exclusive right to Indian citizens’ data to its clients. And its business boomed.


Respected union minister openly stated that our Govt Sold Driving License Data To 87 Private Companies For Rs 65 Crore.

So, we can't blame FB fully.
 
As an Indian, our govt. told us privacy is not an absolute right and,

Quietly, Govt Sold Vehicular Bulk Data to Firm Without Price Discovery, Privacy Protection

Fast Lane Automotive developed a business model offering technological solutions based on this exclusive right to Indian citizens’ data to its clients. And its business boomed.


Respected union minister openly stated that our Govt Sold Driving License Data To 87 Private Companies For Rs 65 Crore.

So, we can't blame FB fully.
The government has always been ambivalent about privacy, so nothing new here. In this case, most citizens don't have a choice and I am not sure if that makes it better or worse compared to voluntarily using FB knowing that they are aggressively selling you in every way possible.
 
But isn't that the case with all companies, I am pretty sure Google has much more data about me than FB but its not like i can do much about it. And Google is the market leader in monetizing data as it is. While it is scary, i think we just need to accept that our data is their data and without any strong data protection laws in India, there is not much we can do.

Other than hoping and praying we don't get caught up in some identity theft or banking hacks due to some credit card/ bank login password being misused.

We desperately need very strong data protections laws in our country.
 
@t3chg33k , here thought govt. is there to protect interests of it's citizens, a bit of privacy violation aiding national security reasons, etc. are understandable.

But, if govt. selling data of own citizens at a pittance to pvt. companies is okay, can't find any issues with FB leeching data of pvt. citizens without giving anyone any monies than renting some services.

Intending to say that there should be some standards set. Things are going out of hand so much, so there should be some collective efforts from everyone in controlling this. Otherwise, will useless complaining after bad things happened.
 
Last edited:
But isn't that the case with all companies, I am pretty sure Google has much more data about me than FB but its not like i can do much about it. And Google is the market leader in monetizing data as it is. While it is scary, i think we just need to accept that our data is their data and without any strong data protection laws in India, there is not much we can do.

Other than hoping and praying we don't get caught up in some identity theft or banking hacks due to some credit card/ bank login password being misused.

We desperately need very strong data protections laws in our country.
The big difference though is that there has been no leak from Google, primarily because they anonymise the data really well. So Google has more data than FB but the people they sell ads to cannot identify you or your interests. It is also easy to reset the identifier regularly on Google's platforms and disable personalisation.

On the other hand, FB has been repeatedly caught allowing others access to your identifiable information on the FB ecosystem, probably because they get paid a lot more for that information than Google's anonymised data. That is where companies need to draw a border and FB has shown that it doesn't care at all. It is only concerned but accumulating as much data about you using its platforms, apps, products and APIs integrated with other apps.
@t3chg33k , here thought govt. is there to protect interests of it's citizens, a bit of privacy violation aiding national security reasons, etc. are understandable.

But, if govt. selling data of own citizens at a pittance to pvt. companies is okay, can't find any issues with FB leeching data of pvt. citizens without giving anyone any monies than renting some services.

Intending to say that there should be some standards set. Things are going out of hand so much, so there should be some collective efforts from everyone in controlling this. Otherwise, will useless complaining after bad things happened.
True, a government ought to think about public interests first but it seems too much to ask at this moment.
 
In general, it is best to check https://haveibeenpwned.com/

I am unaffected by this leak since I deleted my FB account 5 years back but look at the esteemed list my email address is in. Of course, this is a public-facing address protected by MFA and a separate 10+ character password that I don't use for anything private, but just shows how poor companies are at handling data.

Thankfully, my mobile number is not present in any list, yet.
Is that site trustworthy? I don't want to give up my email to yet another site that will lose my email.
 
Back
Top