Facebook (2019 Scrape)
Data Breach
www.facebook.com68,416,517
Records Exposed
Apr 2019
Date of Breach
Database
Breach Type
Oct 2026
Added to Database
About This Breach
Between roughly 2018 and mid-2019, approximately 533 million Facebook users across 106 countries had their profile data scraped by abusing the platform's contact-import feature, which allowed attackers to enumerate phone numbers and match them to public profile information. The exposed data included phone numbers, Facebook IDs, full names, locations (current city and hometown), gender, relationship status, dates of birth and, for some users, email addresses; no passwords were exposed. Facebook disclosed and closed the underlying contact-importer abuse in 2019. The scraped dataset circulated privately for years and was then dumped publicly on a hacker forum in April 2021, split into per-country files, and subsequently redistributed via Telegram. This source is loaded into HEROIC DarkHive as per-country slices (one input file per country); the synthetic placeholder email addresses present in some slices (of the form <facebook-id>@facebook.com) are excluded as they are not real addresses.
Compromised Data Types
Country
International
Category
Social Media
Indexed On
Oct 8, 2026
Breach Type
Database
What Should You Do?
Get Full Breach Details with LeakedSource Pro
Sign up for a LeakedSource Pro account to see exactly what data was exposed in this breach and get real-time notifications when your information appears in new breaches.
Sign Up for Pro- Be alert to smishing attacks (SMS phishing). Scammers may text you pretending to be banks or service providers.
- Enable two-factor authentication (2FA) on all important accounts to add an extra layer of security.
- Use a password manager to generate and store unique, strong passwords for every account.
Were You Affected by This Breach?
Enter your email below to instantly check if your data was compromised in the Facebook (2019 Scrape) breach and 12,000+ other known breaches.
