A massive Facebook breach may also have affected users of hundreds of other websites and apps. But three days after the public disclosure of the breach, it’s not clear that those companies know what, if anything, might have happened to their users.
A spokesperson for the dating app Tinder said Monday that Facebook has shared only “limited information” and called on Facebook to be “transparent” about which of Tinder’s users may have been affected.
A wide range of digital services, including big names like Tinder, Spotify and Airbnb, allow users to log in to accounts on their platforms using their Facebook credentials, a process known as Single Sign-On, or SSO.
The breach, which Facebook has said affected 50 million of its users, would have allowed hackers to log in as those people on Facebook and on apps and websites that allow SSO through Facebook.
None of the companies reached out to by CNN who offer the Facebook login capability would say if they had identified any overlap between their users who log in using Facebook and the 50 million Facebook users whose data was exposed.
Identifying that overlap could allow the companies to examine if affected Facebook users’ data was also compromised on their platforms.
A Facebook spokesperson said it was preparing more guidance for app developers.
Source link