Facebook says it 'unintentionally uploaded' 1.5 million people's email contacts without their consent
- Facebook said that it has "unintentionally uploaded" the email contacts of 1.5 million new Facebook users since May 2016.
- The revelation comes after a security researcher noticed that Facebook was asking some users to enter their email passwords when they signed up for new accounts to verify their identities, a move widely condemned by security experts.
- Business Insider then discovered that if you entered your email password, a message popped up saying it was "importing" your contacts without asking for permission first.
- Facebook said it didn't mean to upload these contacts and is now in the process of deleting them.
- For more stories, go to www.businessinsider.co.za.
Facebook harvested the email contacts of 1.5 million users without their knowledge or consent when they opened their accounts.
Business Insider has learned that since May 2016, the social-networking company has collected the contact lists of 1.5 million users new to the social network. The Silicon Valley company said the contacts were "unintentionally uploaded to Facebook," and it is now deleting them. You can read Facebook's full statement below.
The revelation comes after a security researcher noticed that Facebook was asking some users to enter their email passwords when they signed up for new accounts to verify their identities, a move widely condemned by security experts. Business Insider then discovered that if you entered your email password, a message popped up saying it was "importing" your contacts without asking for permission first.
See also: Facebook accidentally shipped ‘tens of thousands’ of VR controllers with hidden messages like ‘Big Brother is Watching'
At the time, it wasn't clear what was happening - but a Facebook spokesperson has now confirmed that 1.5 million people's contacts were collected this way and fed into Facebook's systems, where they were used to build Facebook's web of social connections and recommend friends to add. It's not immediately clear if these contacts were also used for ad-targeting purposes.
Facebook said that before May 2016, it offered an option to verify a user's account and voluntarily upload their contacts at the same time. However, Facebook said, it changed the feature, and the text informing users that their contacts would be uploaded was deleted - but the underlying functionality was not. Facebook didn't access the content of users' emails, the spokesperson added.
The incident is the latest privacy misstep from the beleaguered technology giant, which has lurched from scandal to scandal over the past two years.
Facebook now plans to notify the 1.5 million users affected over the coming days and delete their contacts from the company's systems.
See also: The cost of keeping Mark Zuckerberg safe rocketed to a massive R278 million after Facebook's year from hell
Facebook's full statement, per a spokesperson:
Last month we stopped offering email password verification as an option for people verifying their account when signing up for Facebook for the first time. When we looked into the steps people were going through to verify their accounts we found that in some cases people's email contacts were also unintentionally uploaded to Facebook when they created their account. We estimate that up to 1.5 million people's email contacts may have been uploaded. These contacts were not shared with anyone and we're deleting them. We've fixed the underlying issue and are notifying people whose contacts were imported. People can also review and manage the contacts they share with Facebook in their settings.
Receive a single WhatsApp every morning with all our latest news: click here.
Also from Business Insider South Africa:
- This South African company helped WhatsApp conquer the world - and it believes your business should start a ‘chat’ service right now
- A South African crypto-wallet startup – which backs an embattled form of bitcoin – just landed R18 million in funding
- This Garmin hack can earn you all the Discovery Vitality points of a 30 minute workout – sitting at your desk
- What it's like to work at the most successful hedge fund in the world, where 30% of new employees don't make it
- We compared the prices of Easter staples – and you can pay 44% too much for a chocolate bunny if you aren't careful
- More South African animal feed and pet food now contain insect larvae - thanks in part to Bill Gates
- Cape Town could finally be getting a direct flight to New York again this December – shaving four hours off travel time to the USA