Facebook Plain-text Password Storage Controversy
Submission 3,106
Part of a series on Facebook / Meta. [View Related Entries]
Overview
Facebook Plain-text Password Storage Controversy refers to the ongoing reaction to reports that Facebook stored hundreds of millions of user data in plain text documents that could be viewed by the company's employees. The company has since confirmed the issue.
Background
On March 21st, 2019, the website KrebsOnSecurity[1] published an article entitled "Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years." The article states that "between 200 million and 600 million Facebook users may have had their account passwords stored in plain text and searchable by more than 20,000 Facebook employees." These passwords date back as far as 2012.
The piece states:
Hundreds of millions of Facebook users had their account passwords stored in plain text and searchable by thousands of Facebook employees -- in some cases going back to 2012, KrebsOnSecurity has learned. Facebook says an ongoing investigation has so far found no indication that employees have abused access to this data.
Developments
Facebook Response
That day, in a blog post, Facebook[2] confirmed the issue and said that they would be notifying "everyone whose passwords we have found were stored in this way." The post continues:
These passwords were never visible to anyone outside of Facebook and we have found no evidence to date that anyone internally abused or improperly accessed them. We estimate that we will notify hundreds of millions of Facebook Lite users, tens of millions of other Facebook users, and tens of thousands of Instagram users
Online Reaction
The issue was discussed on several subreddits, including /r/webdev,[3] /r/worldnews,[4] /r/privacy/,[5] /r/The_Donald [6] and more. On March 21st, Redditor[7] apetrik posted about the controversy in the /r/news subreddit. The post received more than 7,100 points (97% upvoted) and 460 comments.
Media Coverage
The story was covered by various news media outlets, including Yahoo, [8] Wired,[9] TechCrunch,[10] NPR,[11] The New York Times,[12] The Daily Dot [13] and more.
On March 21st, CBS News published a story on the controversy (shown below).
Search Interest
External References
[1] KrebsonSecurity β Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years
[2] Facebook β Keeping Passwords Secure
[4] Reddit β /r/worldnews
[5] Reddit β /r/privacy
[6] Reddit β /r/The_Donald
[7] Reddit β Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years
[8] Yahoo β Why itβs time to change your Facebook password
[9] Wired β FACEBOOK STORED MILLIONS OF PASSWORDS IN PLAINTEXT--CHANGE YOURS NOW
[10] TechCrunch β Daily Crunch: Facebook admits password security lapse
[11] NPR β Facebook Stored Millions Of User Passwords In Plain, Readable Text
[12] The New York Times β Facebook Did Not Securely Store Passwords. Hereβs What You Need to Know.
[13] The Daily Dot β Hundreds of millions of Facebook passwords were accessible to employees
Share Pin
Related Entries 58 total
Recent Images 0 total
There are no recent images.
Recent Videos 0 total
There are no recent videos.