New Facebook bug exposed millions of photos

Facebook logo Image copyright Reuters

Facebook has revealed that a software bug exposed the photos of up to 6.8 million users, including pictures they had not posted.

It made the announcement a day after hosting its pop-up privacy experience "It's Your Facebook" in New York's Bryant Park.

It said several third-party apps had access to "a broader set of photos than usual" for 12 days in September.

The company said it would notify affected users.

It is the latest in a series of data breaches at the social network, which has faced scrutiny following the Cambridge Analytica data scandal.

Image copyright AFP
Image caption Facebook opened a pop-up privacy experience on 13 December

"When someone gives permission for an app to access their photos on Facebook, we usually only grant the app access to photos people share on their timeline.

"In this case, the bug potentially gave developers access to other photos," the company said in a blogpost.

It said up to 1,500 apps were affected by the glitch.

As well as letting developers access photos on a user's timeline, it gave them access to photos posted in Stories and Marketplace, among other features.

It also let them see photos that people had uploaded but not posted on Facebook, for example if they had started writing a post but not finished it.

Facebook said it would be working with affected developers to help them "delete the photos from impacted users".


Have you been told by Facebook that your images have been exposed to third party apps? Let us know by emailing haveyoursay@bbc.co.uk.

Please include a contact number if you are willing to speak to a BBC journalist. You can also contact us in the following ways:

Or use the form below

Your contact details

If you are happy to be contacted by a BBC journalist please leave a telephone number that we can contact you on. In some cases a selection of your comments will be published, displaying your name as you provide it and location, unless you state otherwise. Your contact details will never be published. When sending us pictures, video or eyewitness accounts at no time should you endanger yourself or others, take any unnecessary risks or infringe any laws. Please ensure you have read the terms and conditions.

Terms and conditions

The BBC's Privacy Policy