Facebook staff had access to hundreds of millions of people's passwords

CNN's Jon Sarlin explores the different ways that the social media giant has kept competitors at bay — and why that could now spell trouble.

Posted: Mar 21, 2019 4:48 PM


Facebook revealed on Thursday it didn't properly mask the passwords of hundreds of millions of its users and stored them in an internal database that could be accessed by its staff.

The company said it discovered the passwords during a security review in January and launched an investigation. Facebook did not say for how long they had been storing passwords in this way.

It will be notifying hundreds of millions of Facebook users and tens of thousands of Instagram users if their passwords were involved.

"To be clear, these passwords were never visible to anyone outside of Facebook and we have found no evidence to date that anyone internally abused or improperly accessed them," Pedro Canahuati, a Facebook vice president wrote on Thursday.

He added that Facebook typically "masks people's passwords when they create an account so that no one at the company can see them."

Keeping passwords hashed, or encrypted, is widely regarded as fundamental to cybersecurity, as passwords exist to for users to authenticate their identity without others knowing how.

"Encrypting passwords is Security 101," said Marcus Carey, the CEO Threatcare, an Austin cybersecurity company. "If they can't get the basic principles of cybersecurity right, they are surely failing on the tougher challenges."

Facebook shared information about the security incident soon after it was first reported by Krebs on Security.

Facebook said that hundreds of millions of users of Facebook Lite had been impacted, while tens of millions of regular Facebook users were impacted.

Facebook Lite is a version of Facebook popular among people in parts of the world with less connectivity. CNN Business has asked Facebook why users of Facebook Lite were so highly impacted.

In Europe, Facebook is headquartered in Ireland, where it is regulated by the Irish Data Protection Commission. A commission spokesperson told CNN Business that Facebook had informed it of the issue and that it was awaiting further information. The commission currently has several investigations into Facebook's compliance with European data laws ongoing; the company could face fines upwards of $1 billion as a result of those investigations.

West Lafayette
Partly Cloudy
87° wxIcon
Hi: 95° Lo: 68°
Feels Like: 93°
Kokomo
Partly Cloudy
72° wxIcon
Hi: 94° Lo: 69°
Feels Like: 72°
Rensselaer
Clear
73° wxIcon
Hi: 91° Lo: 66°
Feels Like: 73°
Fowler
Partly Cloudy
86° wxIcon
Hi: 93° Lo: 67°
Feels Like: 96°
Williamsport
Partly Cloudy
74° wxIcon
Hi: 94° Lo: 68°
Feels Like: 74°
Crawfordsville
Partly Cloudy
88° wxIcon
Hi: 94° Lo: 67°
Feels Like: 91°
Frankfort
Partly Cloudy
88° wxIcon
Hi: 93° Lo: 67°
Feels Like: 91°
Delphi
Partly Cloudy
80° wxIcon
Hi: 94° Lo: 68°
Feels Like: 82°
Monticello
Partly Cloudy
80° wxIcon
Hi: 95° Lo: 70°
Feels Like: 82°
Logansport
Partly Cloudy
77° wxIcon
Hi: 92° Lo: 69°
Feels Like: 79°
Record heat expected over the weekend.
WLFI Temps
WLFI Planner

Indiana Coronavirus Cases

Data is updated nightly.

Cases: 748654

Reported Deaths: 13714
CountyCasesDeaths
Marion1029801769
Lake553301003
Allen41600690
St. Joseph36919564
Hamilton36487416
Elkhart29332457
Tippecanoe22833225
Vanderburgh22535398
Porter19307324
Johnson18377385
Hendricks17578317
Clark13176193
Madison13105343
Vigo12594253
LaPorte12384220
Monroe12147174
Delaware10941196
Howard10244225
Kosciusko9606119
Hancock8538144
Bartholomew8154157
Warrick7851156
Floyd7759179
Grant7224178
Wayne7153201
Boone6909103
Morgan6732141
Dubois6209118
Marshall6206116
Cass5989108
Henry5891108
Dearborn588778
Noble579486
Jackson508074
Shelby500297
Lawrence4724121
Gibson443793
Harrison440173
Clinton439255
DeKalb438485
Montgomery433390
Whitley405642
Huntington402181
Steuben398159
Miami391968
Jasper385953
Knox375590
Putnam371760
Wabash360482
Ripley346370
Adams344855
Jefferson335384
White328753
Daviess302499
Wells294881
Decatur289792
Greene286085
Fayette284464
Posey273535
LaGrange272672
Scott269455
Clay265147
Randolph244683
Washington244334
Jennings235049
Spencer233931
Starke227457
Fountain217547
Sullivan213943
Owen210758
Fulton200742
Jay200732
Carroll193420
Orange188055
Perry186637
Rush175526
Vermillion173144
Franklin170135
Tipton165546
Parke148716
Pike137934
Blackford136032
Pulaski119947
Newton112536
Brown103943
Crawford102316
Benton100814
Martin91215
Warren83515
Switzerland8068
Union72810
Ohio57811
Unassigned0419

COVID-19 Important links and resources

As the spread of COVID-19, or as it's more commonly known as the coronavirus continues, this page will serve as your one-stop for the resources you need to stay informed and to keep you and your family safe. CLICK HERE

Closings related to the prevention of the COVID-19 can be found on our Closings page.

Community Events