Skip to main content


Showing posts from October 13, 2018

Marketing Day: Facebook on massive data breach, Twitter GDPR investigation, and more

Here’s our recap of what happened in online marketing today, as reported on Marketing Land and other places across the web.From Marketing Land:Attackers exploited 3 bugs and Facebook’s once-vaunted social graph to steal 29 million users’ data
Oct 12, 2018 by Ginny Marvin
14 million users had names, contact details, bio information, location and search history stolen, among other details.
Twitter reported to be under investigation for violating GDPR
Oct 12, 2018 by Robin Kurzer
Irish privacy authorities are looking into whether Twitter was in breach of the European law when it refused to comply with a user’s request to see his data.
Facebook purges 800 political spam Pages, accounts from its platform
Oct 11, 2018 by Robin Kurzer
The move is the latest effort by the beleagured social network to combat ‘fake news’ and stem the spread of misinformation.
Trust in marketing: Phrasee launches campaign against fear and anxiety in ad campaigns
Oct 11, 2018 by Barry Levine
The AI-powered marketing…

Attackers exploited 3 bugs and Facebook’s once-vaunted social graph to steal 29 million users’ data

Facebook provided an update on the investigation into the massive data exploit it reported to users on September 28. While the overall number of people affected is lower than previously thought (30 million rather than 50 million), that’s about the only good news.How it happened. The attackers were able to take advantage of a combination of three separate software bugs to get Facebook access tokens (used to allow users to stay logged into the app) and take over users’ accounts. They stole the tokens of some 30 million Facebook users.Network effect downfall. As with the Cambridge Analytica scandal, Facebook’s social graph opened up access to Facebook friends and allowed the attackers to take advantage of the network effect. Starting with their own set of friends, “(the attackers) used an automated technique to move from account to account so they could steal the access tokens of those friends, and for friends of those friends, and so on, totaling about 400,000 people,” wrote Guy Rosen, …

Twitter reported to be under investigation for violating GDPR

According to a Fortune report Friday, Twitter is under investigation by Irish privacy authorities for violating the General Data Protection Regulation (GDPR).Michael Veale, a privacy researcher at the Unversity College London, filed a report with the Irish data protection authority (DPA) complaining that Twitter refused to give him records on what kind of data was collected by him.Veale’s request was prompted by suspicions that the social media platform collects additional data on users that click on links made by its link-shortening service,, and that it drops cookies into user browsers to track them after they leave.Under GDPR, data subjects are allowed to ask companies to provide a copy of the data they collect, as well as amend, move and delete it. Companies found in breach of GDPR can be assessed fees up to €20 million, or 4 percent of their annual revenue, whichever is higher.When Veale asked for a copy of his data, Twitter told him no, saying it would take a “disproportion…