A new data breach scandal has hit Facebook, just as the social networking site was scrambling to regain user trust after the Cambridge Analytica debacle. A security researcher found that a third-party app called NameTest left the data of 120 million Facebook users exposed online for years; Facebook took weeks to respond.
It’s unclear if NameTest was deliberately sharing data with third parties.
According to De Ceukelaire, he reported the issue in late April and Facebook took eight days to respond. In May, he checked in with Facebook again, and was told it could take three to six months to investigate the breach, he said. NameTest fixed the issue on Monday.
Facebook awarded De Ceukelaire $4,000 for his find, then matched this amount when he donated it to the Freedom of the Press Foundation.