Facebook | Facebook Lite | Instagram

Summary

Facebook recently revealed that millions of user passwords from Facebook, Facebook Lite, and Instagram have been exposed. The passwords were stored on an internal data storage system in plain text, easily accessible to all of its employees. There is no evidence that the passwords were compromised or used to access customer accounts. Also, the passwords were not visible to anyone outside of company employees. Facebook has ensured that all passwords are now concealed and the customers whose information was exposed will be notified.

Recommendations

The NJCCIC recommends users of Facebook, Facebook Lite, and Instagram to change their password and enable multi-factor authentication where available. For more details please review the Bleeping Computer blog post and Krebs Report here.