UpGuard, an Australian cybersecurity startup company, discovered two datasets stored on unprotected Amazon cloud servers.
“One, originating from the Mexico-based media company Cultura Colectiva, weighs in at 146 gigabytes and contains over 540 million records detailing comments, likes, reactions, account names, FB IDs and more… A separate backup from a Facebook-integrated app titled “At the Pool” was also found exposed to the public internet via an Amazon S3 bucket.” It contains information about users’ friends, likes, groups, and checked-in locations, as well as names, plaintext passwords for “At the Pool” accounts, and email addresses for 22,000 people.
Both datasets were stored in unsecured Amazon S3 buckets, that were secured on April 3, 2019 after Bloomberg notified Facebook, who worked with Amazon to secure them.
Read more about it here.