Toronto

Facebook to be hit by class-action lawsuit after massive security breach

A class-action lawsuit has been proposed in Canada against Facebook following a security breach that put the accounts of tens of millions of users at risk.

Facebook obligated to ensure information 'properly protected,' Toronto law firm says

Facebook announced that tens of millions of Facebook accounts were left vulnerable due to a security breach. A Toronto law firm is now proposing a class-action lawsuit. (Richard Drew/Associated Press)

 A class-action lawsuit has been proposed in Canada against Facebook following a security breach that put the accounts of tens of millions of users at risk.

The social media company announced last week that hackers were able to exploit a vulnerability in Facebook's code that allowed them to steal "access tokens," which could have then allowed them to take over users' accounts.

The vulnerability was related to the "view as" feature, which allows users to see how their profiles appear to other users.

Using a video upload tool, which has been available on the site since July 2017, hackers would be able to access users' private messages and posts, as well as retrieve information through third-party websites like Instagram, Etsy and Spotify.

The company said there were no signs that any accounts were misused or information accessed. Affected users were logged out and notified of the breach when they were logged back in.

Facebook Canada was not immediately available Monday for comment.

Toronto law firm Charney Lawyers PC, which is heading the class action, says Facebook has an obligation to ensure that user information is "properly protected."

Clarifications

  • A previous version of this story said 50 million accounts were accessed by hackers. In fact, the company said attackers stole Facebook access tokens which they could then use to take over accounts. The company has yet to determine whether accounts were accessed or information misused.
    Oct 04, 2018 3:20 PM ET