logo

Meta says risk of account theft after phone number recycling isn't its problem to solve

ID: 1925b17f-5125-52b6-b2a8-3d54b8c5e51c

STIX ID: report--1925b17f-5125-52b6-b2a8-3d54b8c5e51c

Feed Name: The Register (Security)

Threat Score
50/100

Date Published: 2024-02-13

Date Updated: 2026-04-26

Author: Thomas Claburn

...
...

Meta and others are being warned that mobile carriers' practice of recycling abandoned phone numbers can let new holders of those numbers hijack existing online accounts that rely on SMS-based one-time codes or phone-based password resets; a privacy consultant reported the issue to Meta (which rejected it as a bug-bounty case) and has filed a complaint with the Irish Data Protection Commission, while prior research confirmed many recycled numbers remain linked to active accounts.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.