Skip to main content

The context you need, when you need it

When news breaks, you need to understand what actually matters — and what to do about it. At Vox, our mission to help you make sense of the world has never been more vital. But we can’t do it on our own.

We rely on readers like you to fund our journalism. Will you support our work and become a Vox Member today?

Join now

Facebook now knows how many users were hacked last month: 29 million

The company had previously said as many as 90 million accounts could have been compromised.

Facebook CEO Mark Zuckerberg delivers a keynote address during the Facebook f8 conference on September 22, 2011, in San Francisco, California. 
Facebook CEO Mark Zuckerberg delivers a keynote address during the Facebook f8 conference on September 22, 2011, in San Francisco, California. 
Facebook CEO Mark Zuckerberg delivers a keynote address during the Facebook f8 conference on September 22, 2011, in San Francisco, California.
Justin Sullivan/Getty Images

It’s been a rough year for Facebook.

The company announced Friday that hackers had gained access to 29 million personal accounts in a massive data breach two weeks ago. In nearly half of the cases, hackers were able to see details like their users’ relationship status, the area they live in and part of their search history.

This information was disclosed after the company initially told users that 50 to 90 million accounts might have been compromised, urging everyone who was forced to log out of the platform on Friday, September 28, to change their passwords. In a blog post Facebook published prior to the breach announcement, the company stated that it had identified a previously unnoticed vulnerability in its code, giving hackers the ability to steal users’ access tokens, which allow you to stay logged onto the platform for months at a time.

CNN reports that the FBI is “actively investigating” the breach, according to Guy Rosen, a company vice president. Rosen said the FBI has asked Facebook employees “not to discuss who may be behind this attack” or to share other details that may compromise the cyberattack investigation.

According to the most recent details, hackers could see the phone numbers and email addresses of 29 million users, and additional biographical information — including self-reported current city, education, work, people they follow, the last 10 places they were tagged in and the last 15 searches — of 14 million of those.

It’s just the latest example to drive home that private information shared online might not remain private. And the hack raises further questions about how well Facebook can protect users’ data.

Earlier this year, Facebook was at the center of controversy over its security systems again due to the Cambridge Analytica data breach, which affected 87 million accounts. Back then, Facebook CEO Mark Zuckerberg had said, “We have a responsibility to protect your data, and if we can’t then we don’t deserve to serve you.”

This time around, Rosen took a step back and wrote in the blog post that “People’s privacy and security is incredibly important, and we’re sorry this happened.”

The latest data breach happened as many are questioning the role and influence of Silicon Valley in modern-day politics, wondering whether Facebook can responsibly exercise the power it holds over people’s everyday lives. From fake news, to targeted ads to now-commonplace data breaches, any change in Facebook’s practices, intended or not, can have major effects on the world.

For now, it’s probably a good idea to update your password.

“I feel like we’ve let people down and that feels terrible,” Zuckerberg told the New Yorker in a September piece. “But it goes back to this notion that we shouldn’t be making the same mistake multiple times.”

See More:

More in Technology

Podcasts
Are humanoid robots all hype?Are humanoid robots all hype?
Podcast
Podcasts

AI is making them better — but they’re not going to be doing your chores anytime soon.

By Avishay Artsy and Sean Rameswaram
Future Perfect
The old tech that could help stop the next airborne pandemicThe old tech that could help stop the next airborne pandemic
Future Perfect

Glycol vapors, explained.

By Shayna Korol
Future Perfect
Elon Musk could lose his case against OpenAI — and still get what he wantsElon Musk could lose his case against OpenAI — and still get what he wants
Future Perfect

It’s not about who wins. It’s about the dirty laundry you air along the way.

By Sara Herschander
Life
Why banning kids from AI isn’t the answerWhy banning kids from AI isn’t the answer
Life

What kids really need in the age of artificial intelligence.

By Anna North
Culture
Anthropic owes authors $1.5B for pirating work — but the claims process is a Kafkaesque messAnthropic owes authors $1.5B for pirating work — but the claims process is a Kafkaesque mess
Culture

“Your AI monster ate all our work. Now you’re trying to pay us off with this piece of garbage that doesn’t work.”

By Constance Grady
Future Perfect
Some deaf children are hearing again because of a new gene therapySome deaf children are hearing again because of a new gene therapy
Future Perfect

A medical field that almost died is quietly fixing one disease at a time.

By Bryan Walsh