NEW YORK — A Ukrainian security researcher said a database with the names, phone numbers and unique user IDs of more than 267 million Facebook users was exposed on the open internet for at least 10 days this month.
Bob Diachenko said nearly all of the affected users are in the U.S.
He said the database was likely harvested by criminals, who could use it for spam, phishing attacks or identity theft.
Facebook is investigating; the company said it believes the data was obtained before it made technical changes to better protect user data.
Those changes included restricting user access to the phone numbers of other users last year.