Cybersecurity incident
Date: 2018-09-27 00:00:00
Affected organization: Facebook
Affected country: United States of America
Industry: Information
Event type: Exploitive
Event subtype: Exploitation of End Hosts
Motive: Financial
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined
Description: Facebook says a breach affected 50 million people on the social network. The vulnerability stemmed from the "view as" feature, which lets people see what their profiles look like to others. Attackers exploited code associated with the feature that allowed them to steal "access tokens" that could be used to take over people's accounts.