267 Million Facebook Profiles Being Sold For $600 On Dark Web

An anonymous reader shares a report: Threat actors are selling over 267 million Facebook profiles for $623 on dark web sites and hacker forums. While none of these records include passwords, they do contain information that could allow attackers to perform spear phishing or SMS attacks to steal credentials. Last month, security researcher Bob Diachenko discovered an open Elasticsearch database that contained a little over 267 million Facebook records, with most being users from the United States. For many of these records, they contained a user's full name, their phone number, and a unique Facebook ID. The ISP hosting the database eventually took the server offline after being contacted by Diachenko.

Facebook Profile? You can have it.

[GregMmm]

I have no information on the profile worth a nickel, and apparently $600 for 267 million is alot less than a nickel.

Also, I haven't logged into Facebook for a number of years.

Have at it...

Re:

[Quakeulf]

Only idiots use facebook anyway. I feel my brain rot away the moment I see someone asking me to get on there.

Re:

[slazzy]

Same here, I intentionally keep my public and open. I'm happy to make it available to employers and border/government officials however there's nothing there other than me posting and liking a few kitten and puppy photos. Perfectly normal.

Re:

[Rockoon]

Did you give facebook your mobile phone number for account recovery?

When the summary talks about SMS attacks to steal credentials, I presume these phone numbers leaked also, so they may have your name and phone number to go with the other data facebook has collected on you (and dont for a second presume its just what you posted or entered into their system.)

The hackers might be just one social engineer away from commandeering your phone number and resetting passwords that rely on mobile phone verificati

$600?

[LatencyKills]

That's over two millionths of a penny each! Who knew they were worth that much?

Re:

[Nidi62]

That's over two millionths of a penny each! Who knew they were worth that much?

The people who paid Facebook hundreds of thousands or millions of dollars for that same account data must be pissed.

Shut down FAcEboOk already

[Anonymous Coward]

and nothing of value will be lost

Facebook "quizzes"

[Pascoea]

Time to go fill out all those Facebook "Quizzes", you know the "Favorite food?", "Number of siblings?", "Hometown" shit that people obsessively share? What could possibly go wrong with someone having your e-mail address and all the typical answers you'd use for security questions?

Hopefully they'll sell mine

[OneHundredAndTen]

I used my Facebook account to make comments in sites that require you to register to do so. I imagine that caused my Facebook account to fill up with all sorts of garbage - I wouldn't know, for I never checked it out. Said account is now not even good for that, for the Facebook powers-that-be have suspended it. Well, they know where they can stick it.

Re:

[Errol backfiring]

In the web where the sun doesn't shine?

alternative to check?

[mabu]

the site amibreached.com is a pay site to find out more data...

Is there a non-pay site that will show the details of any data breach?

And how is it legal for companies like that to buy illegal info and then monetize it?

Imagine how much oil you could buy with $600

[jfdavis668]

The current price is negative $37.63. Um, I guess you could buy it all?

Re:

[flyingfsck]

You could buy all the oil yes, but where will you put it? All the tanks and salt mines are full.

Re:

[jfdavis668]

I'll just fill up a few nearby lakes and reservoirs. With everyone staying at home, no one will even notice.

Re:

[account_deleted]

Comment removed based on user account deletion