- 30 million users total were hacked. This is lower than the original estimate, which was 50 million. Of those 30 million, the hackers stole data from 29 million users. For one million users, their accounts were hacked but no data was stolen.
- Of the 29 million users with stolen data, attackers accessed two sets of information from 15 million users – name and contact details (phone number, email, or both, depending on what people had on their profiles).
- The other 14 million users had the same set of data stolen as the previous 15 million, but additionally lost more data, such as username, gender, locale/language, relationship status, religion, hometown, self-reported current city, birthdate, device types used to access Facebook, education, work, the last 10 places they checked into or were tagged in, website, people or Pages they follow, and the 15 most recent searches.
Although many users might look at these figures and the information obtained as harmless, it is important to note that the details above do not include payment information, private chats within Facebook Messenger, photographs, etc., the hackers could still likely profit immensely from all that data. For example, the email addresses can be sold to spammers for a huge sum.
We’re cooperating with the FBI, which is actively investigating and asked us not to discuss who may be behind this attack.