Security researchers have leaked millions of Facebook users

Security researchers at UpGuard said that Facebook application developers had left hundreds of millions of user records open on public cloud servers.

The researchers said the two most important datasets came from a Mexican company, Cultura Colectiva, and an American company, At the Pool. And

Cultura Colectiva has stored the data On an Amazon S3 storage server without a password, allowing anyone to access it.

A dataset of 146 gigabytes of more than 540 million records was found, containing information such as Facebook user activity, comments, preferences, comments, account names, and more.

A more sensitive dataset was also stored as a backup file on a separate storage server by At the Pool, which contained personal information, including 22,000 Facebook passwords, friend lists, and photos. .

It is unclear how long the data has been publicly available or is obtained from unprotected servers.

According to researchers at UpGuard, who found the data in Amazon's cloud servers, At the Pool and Cultura Colectiva did not respond to data deletion requests, but were deleted after that the security company has contacted Facebook.

A Facebook spokesman said: "The company's policies prohibit storing Facebook's information in a public database," adding that the company had not yet found any evidence to prove the problem. Data abuse, but that the subject is still the subject of an investigation.

Social networks have been heavily criticized for the way user data is shared with third parties.

The acquisition of Cambridge Analytica political data company was based on the information of millions of users via the application of the largest Facebook strike competitions.

Since then, the platform has reduced the number of applications that can access user data.

In the new case, the data seems to have been made available by mistake, but the problem still raises questions as to the location of the user's information after they are compiled by Facebook applications.

Researchers at UpGuard, who have highlighted numerous leaks on Amazon's servers in the past, wrote in a publication announcing the results: "Data on Facebook users has expanded beyond beyond the limits that Facebook can control today. "

"Combine personal data with often poorly configured storage techniques, which generates a long series of data on Facebook users who continue to flee," the publication adds.