FACEBOOK HAS ADMITTED that millions of passwords were stored in plain text on its internal servers – a security slip that left them readable by the company’s employees.
The social media giant has, however, said there is no evidence that employees had abused access to the data.
The passwords were stored on internal company servers and no outsiders could access them, Facebook said.
“To be clear, these passwords were never visible to anyone outside of Facebook and we have found no evidence to date that anyone internally abused or improperly accessed them,” vice president of engineering, security, and privacy Pedro Canahuati said in a blog post.
The blunder was discovered during a routine security review earlier this year, he said.
Canahuati has said the issues have been fixed.
As a precaution, Facebook will notify everyone whose password was found stored in this way.
“We estimate that we will notify hundreds of millions of Facebook Lite users, tens of millions of other Facebook users and tens of thousands of Instagram users,” Canahuati said.
Facebook has reminded users of some steps they can take to keep their account secure:
This incident comes following an array of controversies centred on whether Facebook properly safeguards the privacy and data of its users.
In April, Facebook revealed it believed that up to 87 million people’s data was improperly shared with the political consultancy firm Cambridge Analytica.
Last September, the social media giant said that up to 50 million accounts were breached in a security flaw exploited by hackers.
Includes reporting by AFP
To embed this post, copy the code below on your site
have your say