Meta Reports Data Leak of Million Facebook Users

Meta reported on Friday that at least 1 million Facebook users' data may have been leaked because of apps in the Apple and Google app shops that were designed to steal credentials.

Meta identified 402 malicious Android and iOS apps (355 for Android, 47 for iOS). They disguised as games, VPNs, photo editors and horoscope apps, among others, stealing users' Facebook login credentials.

The malicious apps required users to log in to Facebook for additional features. Users could, for example, upload an edited photo to their Facebook account. But in doing so, they unknowingly compromised their account by granting access to the app's author.

Meta reported the apps to Google and Apple and got them removed. David Agranovich, director of global threat disruption at Meta, told reporters that it was impossible to determine the exact number of Facebook users who fell for the scam as the attack took place on their personal devices. However, there could be potentially a million of those affected.