Facebook quiz app may have leaked personal data of 120 million users

While the whole Cambridge Analytica scandal isn’t that far in our past, we knew it was going to unearth a lot of skeletons in Facebook’s closet. The latest one is a Facebook quiz app that may have leaked personal data of around 120 million users who’ve answered the quizzes. Security researcher who goes by the username Inti De Ceukelaire discovered the leak by taking part in Facebook’s data abuse bounty program launched in April 10. One of the third-party apps he looked through was from NameTests.com and there he discovered that the site exposed Facebook users’ data to “any third-party that requested it.” He found that the app exposed user information through javascript, which could easily share files between sites as part of its basic functions.

The site has possibly leaked information since the end of 2016 and De Ceukelaire reported it to Facebook by April 22. Unfortunately, Facebook’s response wasn’t as speedy as the fix only came around the end of June. According to NameTests’ parent company, Social Sweethearts, they have investigated the issue but no user data has been compromised and they are working on measures to avoid these risks from happening in the future. 

Source: TechCrunch