Facebook Groups API flaw exposed data to 100 developers, company says

Enlarge / A wall of user photos form a Facebook logo at the company's data center in Lulea, Sweden. (credit: JONATHAN NACKSTRAND/AFP/Getty Images)

More than a year after the Cambridge Analytica scandal came to light, Facebook is once again admitting that some developers have accessed user data that they should not have.

Facebook said in a developer post yesterday that it would be changing developers' access to a number of APIs, including Groups, after "roughly 100 partners" were found to have extra access. "We recently found that some apps retained access to group member information, like names and profile pictures in connection with group activity, from the Groups API, for longer than we intended," the company said.

At least 11 developers accessed group members' information in the last two months, Facebook added. "Although we've seen no evidence of abuse, we will ask them to delete any member data they may have retained and we will conduct audits to confirm that it has been deleted."

Read 5 remaining paragraphs | Comments