More Questions For Facebook On Extent Of Ghost Profiles

Packet Storm Security disclosed a vulnerability in Facebook’s "Download Your Information" (DYI) feature that caused aggregated contact dossiers—linking emails, names, and phone numbers of users and non-users—to be included in users’ downloaded account data. Facebook fixed the bug after notification and estimated about six million users were affected, but Packet Storm says the company underestimated the scope, did not notify non-users whose data was exposed, and that iterative enumeration could reveal much more personal data than initially reported.