Facebook on Friday disclosed a breach of its network that affected almost 50 million user accounts. The social networking giant said that attackers exploited a vulnerability in Facebook’s code that let them steal access tokens when users switched over to a public profile view via the “View As” feature. The access tokens allowed the attackers to take over user accounts — however it’s still unclear whether user data was accessed and misused.
Facebook said it has secured its network and user accounts since engineering discovered the attack on September 25. The vulnerability was fixed and Facebook said it has notified law enforcement.