Hackers got users' addresses, phone numbers from Facebook owner Meta with fake request – HT Tech

Copyright © HT Media Limited
All rights reserved.
Facebook owner Meta gave user information to hackers who pretended to be law enforcement officials last year, a company source said Wednesday, highlighting the risks of a measure used in urgent cases.
Imposters were able to get details like physical addresses or phone numbers in response to falsified “emergency data requests,” which can slip past privacy barriers, said the source who requested anonymity due to the sensitivity of the matter.
Criminal hackers have been compromising email accounts or websites tied to police or government and claiming they can’t wait for a judge’s order for information because it’s an “urgent matter of life and death,” cyber expert Brian Krebs wrote Tuesday.
Bloomberg news agency, which originally reported Meta being targeted, also reported that Apple had provided customer data in response to forged data requests.
Apple and Meta did not officially confirm the incidents, but provided statements citing their policies in handling information demands.
When US law enforcement officials want data on a social media account’s owner or an associated cell phone number, they must submit an official court-ordered warrant or subpoena, Krebs wrote.
But in urgent cases authorities can make an “emergency data request,” which “largely bypasses any official review and does not require the requestor to supply any court-approved documents,” he added.
Meta, in a statement, said the firm reviews every data request for “legal sufficiency” and uses “advanced systems and processes” to validate law enforcement requests and detect abuse.
“We block known compromised accounts from making requests and work with law enforcement to respond to incidents involving suspected fraudulent requests, as we have done in this case,” the statement added.
Apple noted its guidelines, which say that in the case of an emergency application “a supervisor for the government or law enforcement agent who submitted the… request may be contacted and asked to confirm to Apple that the emergency request was legitimate.”
Krebs noted that the lack of a unitary, national system for these type of requests is one of the key problems associated with them, as companies end up deciding how to deal with them.
“To make matters more complicated, there are tens of thousands of police jurisdictions around the world – including roughly 18,000 in the United States alone – and all it takes for hackers to succeed is illicit access to a single police email account,” he wrote.
Follow HT Tech for the latest tech news and reviews , also keep up with us on Twitter, Facebook, and Instagram. For our latest videos, subscribe to our YouTube channel.
71648726959576

source

Share:

More Posts

Market Research

Pulse Surveys

Turn feedback into action

Our survey platform makes it easy to measure and understand feedback so you can drive growth and innovation

Pulse Handshak

Pulse Handshak

Collaborative online survey tool for the market research industry. Remote assisted surveying just like face-to-face interviews. Here interviewers can talk to the respondent over the web-console without the need for any other communication channel and share the same Q're with responses and click actions.

Pulse FE

Pulse FE

Pulse Field Expert or Pulse FE is the main platform for both offline and online survey at softofficepro.com. It is robust and used by hundreds of clients over tens of years with millions of responses. Do it once Q're and deploy on both offline devices (android) and online forms makes it a great cost effective platform for any kind of responses

Pulse Ultimate

Pulse Ultimate

Pulse Ultimate is targeted for tracking studies and retail audits. An offline survey system offering extreme field control including processes like data quality check, back-check, rework, comparison with previous wave data etc. helps to get the best results on a day-to-day basis

Pulse LS

Pulse LS

Use a managed Limesurvey and our expertise for creating complex forms and token based user management. Use optional mailing system to send survey invitation to each participant and track progress of the response status. Industry standard SPSS / R output supported