Facebook harvested the email contacts of 1.5 million users without their knowledge or consent and used the data to build a web of their social connections, it emerged today. Business Insider reports that Facebook began collecting the contact lists in May 2016 when new users opened a new account on the social network.

facebook email contacts uploaded

Image via Business Insider

The harvesting occurred when users were offered email password verification as an option to verify their identity when signing up to Facebook, a method widely condemned by security experts. In some cases if users did enter their password, a pop-up message would appear informing them that it was "importing" their contacts, without even asking their permission to do so.

These contacts were then fed into Facebook's database systems and used to build a map of users' social links and inform recommended friends on the social network. It's not clear if the data was also used for ad-targeting purposes.

In a statement given to Business Insider, the company said that these email contacts had been "unintentionally uploaded" to Facebook when users created their account.

It also said that prior to May 2016, it offered an option to verify a user's account and voluntarily upload their contacts at the same time. However, the feature was changed and the text informing users that their contacts would be uploaded was deleted, but the underlying functionality was not. Facebook says at no point did it access the content of users' emails.

We estimate that up to 1.5 million people's email contacts may have been uploaded. These contacts were not shared with anyone and we're deleting them. We've fixed the underlying issue and are notifying people whose contacts were imported. People can also review and manage the contacts they share with Facebook in their settings.

The news is just the latest addition to a long list of privacy blunders and violations by Facebook. In March, for example, it emerged that between 200 and 600 million Facebook users may have had their account passwords stored in plain text in a database accessible to 20,000 Facebook employees. Some Instagram passwords were also included.

That was followed earlier this month by news that cybersecurity researchers had discovered millions of Facebook records publicly accessible on Amazon's cloud servers, after the data was uploaded by third-party companies that work with Facebook.

In yet another development just this week, over 4,000 pages of documents from 2011 to 2015 were leaked which provide insight into how Facebook took advantage of user data while publicly promising to protect user privacy before and after its 2015 move to end broad access to user data.

Top Rated Comments

LewisChapman Avatar
54 months ago
Facebook saying they will ‘delete the harvested email addresses’ is like me saying I’ll put away this pack of biscuits after this last one.
Score: 27 Votes (Like | Disagree)
iPhysicist Avatar
54 months ago
DELETE Facebook already. What on earth keeps this thing alive?! Every other "social" media would be dead by now.
Score: 26 Votes (Like | Disagree)
macfacts Avatar
54 months ago
Why hasn't Tim removed the FB app from the store?
Score: 15 Votes (Like | Disagree)
Adam Warlock Avatar
54 months ago
This sort of thing keeps happening because there are no real consequences. A million-dollar fine per e-mail address would change things very, very quickly IMO.
Score: 13 Votes (Like | Disagree)
0815 Avatar
54 months ago
Not surprised... they are not trustworthy.

But as long as people stay with them nothing will change.
Score: 8 Votes (Like | Disagree)
44267547 Avatar
54 months ago
Facebook definitely has its share of ongoing problems, it’s unfortunate what it’s become over the years, especially when it doesn’t value the users privacy in mind, even when they claim too. And in today’s digital era of the Internet, privacy is crucial, and Facebook has failed on many levels. (Proud to say I’ve never had a Facebook account and now I’m glad I never did.)
Score: 6 Votes (Like | Disagree)

Popular Stories

Google Assistant

Google I/O 2016: Assistant, Home, Allo, Duo, Android N, and More

Wednesday May 18, 2016 11:51 am PDT by
Google hosted its annual I/O developers keynote at the Shoreline Amphitheatre in Mountain View, California today, announcing multiple new products and services related to Android, search, messaging, home automation, and more. Google Assistant Google Assistant is described as a "conversational assistant" that builds upon Google Now based on two-way dialog. The tool can be used, for example,...