Facebook Harvested Email Contacts of 1.5 Million Users Without Their Consent

Thursday April 18, 2019 2:38 AM PDT by Tim Hardwick

Facebook harvested the email contacts of 1.5 million users without their knowledge or consent and used the data to build a web of their social connections, it emerged today. Business Insider reports that Facebook began collecting the contact lists in May 2016 when new users opened a new account on the social network.

Image via Business Insider

The harvesting occurred when users were offered email password verification as an option to verify their identity when signing up to Facebook, a method widely condemned by security experts. In some cases if users did enter their password, a pop-up message would appear informing them that it was "importing" their contacts, without even asking their permission to do so.

These contacts were then fed into Facebook's database systems and used to build a map of users' social links and inform recommended friends on the social network. It's not clear if the data was also used for ad-targeting purposes.

In a statement given to Business Insider, the company said that these email contacts had been "unintentionally uploaded" to Facebook when users created their account.

It also said that prior to May 2016, it offered an option to verify a user's account and voluntarily upload their contacts at the same time. However, the feature was changed and the text informing users that their contacts would be uploaded was deleted, but the underlying functionality was not. Facebook says at no point did it access the content of users' emails.

We estimate that up to 1.5 million people's email contacts may have been uploaded. These contacts were not shared with anyone and we're deleting them. We've fixed the underlying issue and are notifying people whose contacts were imported. People can also review and manage the contacts they share with Facebook in their settings.

The news is just the latest addition to a long list of privacy blunders and violations by Facebook. In March, for example, it emerged that between 200 and 600 million Facebook users may have had their account passwords stored in plain text in a database accessible to 20,000 Facebook employees. Some Instagram passwords were also included.

That was followed earlier this month by news that cybersecurity researchers had discovered millions of Facebook records publicly accessible on Amazon's cloud servers, after the data was uploaded by third-party companies that work with Facebook.

In yet another development just this week, over 4,000 pages of documents from 2011 to 2015 were leaked which provide insight into how Facebook took advantage of user data while publicly promising to protect user privacy before and after its 2015 move to end broad access to user data.

Top Rated Comments

(View all)
Avatar
13 months ago
Facebook saying they will ‘delete the harvested email addresses’ is like me saying I’ll put away this pack of biscuits after this last one.
Score: 27 Votes (Like | Disagree)
Avatar
13 months ago
DELETE Facebook already. What on earth keeps this thing alive?! Every other "social" media would be dead by now.
Score: 26 Votes (Like | Disagree)
Avatar
13 months ago
Why hasn't Tim removed the FB app from the store?
Score: 15 Votes (Like | Disagree)
Avatar
13 months ago
This sort of thing keeps happening because there are no real consequences. A million-dollar fine per e-mail address would change things very, very quickly IMO.
Score: 13 Votes (Like | Disagree)
Avatar
13 months ago
Not surprised... they are not trustworthy.

But as long as people stay with them nothing will change.
Score: 8 Votes (Like | Disagree)
Avatar
13 months ago
Facebook definitely has its share of ongoing problems, it’s unfortunate what it’s become over the years, especially when it doesn’t value the users privacy in mind, even when they claim too. And in today’s digital era of the Internet, privacy is crucial, and Facebook has failed on many levels. (Proud to say I’ve never had a Facebook account and now I’m glad I never did.)
Score: 6 Votes (Like | Disagree)

Top Stories

Leaker Claims New 13-inch MacBook Pro Coming as Soon as Next Month

Monday April 6, 2020 2:56 am PDT by Tim Hardwick
Apple will announce a new 13-inch MacBook Pro in May with the codename J223, according to a rumor shared by YouTuber and leaker Jon Prosser. Note: it’s a refresh to the current 13” So the bigger 14” display upgrade is a big possibility— Jon Prosser (@jon_prosser) April 4, 2020 Analyst Ming-Chi Kuo has said Apple plans to release new MacBook Pro and MacBook Air models with scissor keyboards ...

'Leaked' Images Allegedly Show iPhone 12 With Smaller Notch, Rear Camera Redesign, and Home Screen Widgets

Tuesday April 7, 2020 4:28 am PDT by Tim Hardwick
Two images shared on social media this morning are currently stoking speculation about possible hardware redesigns coming to the iPhone 12 and the potential introduction of Home screen widgets in iOS 14. Shared by Twitter user Fudge (choco_bit), the images depict a front and rear graphical representation of a smartphone with interface elements on the screen, suggesting it came out of a...

Apple Releases iOS and iPadOS 13.4.1 With Fix for FaceTime Bug

Tuesday April 7, 2020 10:06 am PDT by Juli Clover
Apple today released iOS and iPadOS 13.4.1, minor updates that come two weeks after the release of iOS and iPadOS 13.4, major updates that introduced iCloud Folder Sharing, a new Mail toolbar, trackpad support for the iPad, and more. The iOS and ‌iPadOS‌ 13.4.1 updates are available on all eligible devices over-the-air in the Settings app. To access the updates, go to Settings > General...

More References to Apple's Upcoming Low-Cost iPhone Appear Online

Monday April 6, 2020 4:38 am PDT by Tim Hardwick
Further references to Apple's upcoming low-cost iPhone have appeared online, one on a Chinese e-commerce website and another on Verizon's smartphone trade-in page. Spotted by tech blog MySmartPrice, Chinese retailer JD.com has published a placeholder for Apple's so-called "iPhone 9" that includes a teaser image of a veiled smartphone, but other than that it lacks any particularly revealing...

Apple Reportedly Targeting WWDC for Over-Ear Headphones Launch, New 'AirPods X' Later in the Year

Tuesday April 7, 2020 7:00 am PDT by Eric Slivka
Rumors of Apple-branded over-ear headphones have been circulating for quite some time, while more recent rumors have mentioned an "AirPods Pro Lite" that could also be in the works, and Twitter leaker Jon Prosser's recent foray into Apple rumors provides a bit more detail on what we might able to expect for these products. Current Beats Studio3 Wireless and BeatsX On the over-ear side,...

Facebook Launches 'Tuned' Messaging App for Couples

Wednesday April 8, 2020 4:50 am PDT by Tim Hardwick
Facebook has quietly released Tuned, a new messaging app designed to provide a "private space" for couples to connect, reports The Information. Designed by NPE, an experimental group within the company that was established last year, the app encourages couples to share messages, notes, cards, voice memos, photos and Spotify songs with each other, thereby creating a "digital scrapbook" of...

Apple Shares Assembly and Use Instructions for New Face Shields, Shipping 1 Million Per Week to Medical Workers

Tuesday April 7, 2020 8:54 am PDT by Eric Slivka
Following this weekend's news from Tim Cook that Apple is working with its supply chain to produce a million face shields per week for medical workers, the company has shared a support document outlining how to assemble and adjust the shields. The document includes a series of images and animations showing how the simple three-piece product can be assembled for either a regular fit or with...

Some Users Experiencing System Crashes on macOS 10.15.4, Especially During Large File Transfers

Monday April 6, 2020 8:17 am PDT by Joe Rossignol
A sizeable number of Mac users are experiencing occasional system crashes after updating to macOS Catalina version 10.15.4, released a few weeks ago. The crashing issue appears to be most prominent when users attempt to make large file transfers. In a forum post, SoftRAID described the issue as a bug and said that it is working with Apple engineers on a fix for macOS 10.15.5, or a...

2020 iPad Pro Confirmed to Lack a U1 Ultra Wideband Chip

Tuesday April 7, 2020 7:52 am PDT by Eric Slivka
Last week, we laid out evidence suggesting that the just-released iPad Pro models do not contain a U1 Ultra Wideband chip, including the lack of any mention of the chip in tech specs or Apple's press materials, the absence of software support for U1 features, and more. Most tellingly, iFixit was unable to find the chip or related antennas in the device. Daring Fireball's John Gruber has follo...

The New York Times, IFTTT, Medium, and Other Apps Adopt Sign in With Apple Ahead of June 30 Deadline

Sunday April 5, 2020 7:08 pm PDT by Frank McShan
Apps with sign-in functionality, including The New York Times, IFTTT, Medium, and more, have continued to adopt Apple's secure Sign in with Apple feature ahead of a deadline of June 30. The deadline for these apps to support the feature was recently extended from April 30. Sign in with Apple, first introduced in iOS 13, allows users to create accounts for apps and websites using an Apple ID. ...