Sunday, October 18, 2026

Facebook Gave Users Personal Data Access including Private Messages to Amazon, Apple, Microsoft, Netflix, etc

Facebook’s internal document shows that it gave users personal data access to some of the tech gaints including Amazon, Apple, Microsoft, Netflix, Spotify and Yandex.

Data access including users’ private messages and to see the names, contact details and activities of their friends.

A Facebook internal document that obtained by The New York Times which was generated by the companies internal system back to 2017.

This internal document contains details of tracking partnerships, provide the most complete picture yet of the social network’s data-sharing practices.

This data sharing campaign is to gain the mutual benefits also for Facebook growth and it got more users, lifting its advertising revenue.

Facebook experienced a potential data breach in last September that affected up to 50 million users and also it faced some of other security incidents.

Personal Data that Given to Tech gaints 

  • In this case, Facebook gave permission to Bing search engine to see the Facebook users name virtually all Facebook users’ friends without consent, the records show
  • Facebook gave access to Netflix and Spotify to read Facebook users’ private messages.
  • Amazon can able to access the names and contact information through their friends.
  • Yahoo view streams of friends’ posts as recently

According to the New York times report, the documents, as well as interviews with about 50 former employees of Facebook and its corporate partners, reveal that Facebook allowed certain companies access to data despite those protections. 

More than 150 companies were gain benefits and most of the companies are tech businesses, including online retailers and entertainment sites, but also automakers and media organizations.

Steve Satterfield, Facebook’s director of privacy and public policy, said none of the partnerships violated users’ privacy or the F.T.C. agreement. 

Former Facebook CSO Alex Stamos Tweets to disclose more details about what special access it provided to whom.”

https://twitter.com/alexstamos/status/1075297398342148097

“Facebook has found no evidence of abuse by its partners, a spokeswoman said. Some of the largest partners, including Amazon, Microsoft and Yahoo, said they had used the data appropriately, but declined to discuss the sharing deals in detail. “

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Hot this week

How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

What is Deep Web The deep web, invisible web, or...

How to Build and Run a Security Operations Center (SOC Guide) – 2023

Today’s Cyber security operations center (CSOC) should have everything...

Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

TeamViewer's popularity and remote access capabilities make it an...

Web Server Penetration Testing Checklist – 2026

Web server pentesting is performed under three significant categories: identity,...

ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

ATM Penetration testing, Hackers have found different approaches to...

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access...

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how...

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a...

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign...

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting...

New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs

A new GhostBat RAT variant targets 60 Android financial...

New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads

ROMULUS, a shared ClickFix delivery platform operating across six...

Related Articles

Recent News