The next time you are tempted to download an app or take an interesting quiz on your social media account, think again. In 2018, Facebook suffered a data breach and exposed the information of 30 million users. The data included addresses, telephone numbers, and other data that phishers could use for identity theft.
Facebook sued two Ukrainian developers, Andrey Gorbachov and Gleb Sluchevsky, who posed as legitimate Facebook developers and created apps and online quick personality quizzes such as “What is the Color of Your Aura?” These apps and online quizzes allegedly stole information from Facebook users.
The apps promised limited access to the user’s information but eventually used the collected data to pose as the users. This gave them access to the user’s friends and connections, which allowed them to use targeted advertising strategies. The social media giant also alleged that Gorbachov and Sluckevsky might be responsible for the sale of 81,000 messages from private users.
A Combination of Marketing and Curiosity
The Ukrainian developers created malware that encouraged users to install an app that promised “limited access” to their profile. Users undermined their security when they interacted with the app or quiz. The quick tests and apps were made to appeal to the curiosity and interest of most people on social media, often using personality and character tests to appeal to the audience.
Facebook Is Not a Rare Case
But Facebook is only one in thousands of digital data breaches that happen daily. Many companies are now hiring network security testing companies as part of protecting their clients’ information. In 2019, data breaches increased by 54% compared to the first six months of 2018. The number of publicly disclosed data breaches reached 3,800, but there are smaller data breaches that do not make it to the headlines.
Of the biggest security leaks, the biggest financial breach was for Capital One, an international bank holding company. Hacker Paige Thompson was able to hack a third-party cloud computing company hired by Capital One. Thompson gained the financial information of 140,000 customers and 80,000 bank account numbers. Although the U.S. Department of Justice says that the information was retrieved, the breach affected more than 100 million people in two countries, the United States and Canada.
What Can You Do?
For many users, protecting your data can be as simple as not downloading suspicious apps or opening email messages from unknown senders. You should also check the settings on your social media account. If you download an app that seems malicious, it’s best to delete it.
For businesses, such data breaches can be costly and even hurt a company’s standing in the industry. Facebook’s suit against Gorbachov and Sluchevsky included “reputational harm” since many Facebook users blamed the social media company for the sale of private and intimate messages, of which the Ukrainian developers were said to be responsible.
Most companies now hire security testing companies to check the vulnerability of their servers. These companies use various security testing controls to identify weaknesses and risks. This can help companies identify network accessibility and the security of sensitive data systems. For 2020, it seems that the only answer to data breaches and hackers is vigilance in the digital domain and instilling customer awareness.
