Facebook hacker puts private data of 533 million up for sale, including 152,000 in Cyprus

A hacker is offering information on more than 500 million Facebook Inc users – including phone numbers and other data – virtually for free. News of the latest leak here was first reported by Business Insider.

According to list of countries shown on Twitter, 152, 321 of the accounts relate to people in Cyprus.

The personal data of these Facebook users has been posted online in a low-level hacking forum. The data includes phone numbers, full names, location, email address, and biographical information. Security researchers warn that the data could be used by hackers to impersonate people and commit fraud.

The database appears to be the same set of Facebook-linked telephone numbers that has been circulating in hacker circles since January and whose existence was first reported by tech publication Motherboard, according to Alon Gal, co-founder of Israeli cybercrime intelligence firm Hudson Rock.

Reuters was not immediately able to vet the information, which is being offered for a few euros’ worth of digital credit on a well-known site for low-level hackers, but Gal said on Saturday that he had verified the authenticity of at least some of the data by comparing it against phone numbers of people he knew. Other journalists say they have also been able to match known phone numbers to the details in the data dump.

In a statement, Facebook said that the data was “very old” and related to an issue that it had fixed in August 2019.

An attempt by Reuters to reach the leaker over the messaging service Telegram was not immediately successful.

Gal told Reuters that Facebook users should be alert to “social engineering attacks” by people who may have obtained their phone numbers or other private data in the coming months.

Business Insider reviewed a sample of the leaked data and verified several records by matching known Facebook users’ phone numbers with the IDs listed in the data set. We also verified records by testing email addresses from the data set in Facebook’s password reset feature, which can be used to partially reveal a user’s phone number.