Breach exposure

Public breaches involving Facebook

Cross-matched against the WhatTerms breach catalog. Each entry links the breach disclosure, names the data classes confirmed exposed, and matches each class to a concrete recovery action — not just “your email was leaked”.

Recovery actions

Sorted by severity. Each action maps to one or more data classes confirmed exposed across the breaches below.

Treat SMS 2FA on this number as compromised. Move to TOTP or hardware keys; consider a relay number.
High
Phone numbers feed SIM-swap attacks and SMS phishing.
Treat DOB as a leaked secret on knowledge-based authentication. Switch any KBA-protected account to MFA.
High
DOB is a top-3 KBA factor and unrecoverable.
Switch this service to a per-service email alias and treat the leaked address as compromised.
Medium
Exposed emails feed phishing campaigns and credential-stuffing lists.
Audit accounts where you reuse this handle; assume it can be cross-correlated.
Medium
Handle reuse links pseudonymous accounts back to your real identity.

Facebook

Disclosed 2021-04-03 · 533.0M accounts

Phone numbers and birth-dates of 533M users posted publicly. Linked to a 2019 vulnerability.

Data classes exposed

Email address
Phone number
Username / handle
Date of birth

Source: Disclosure of dataset on a hacker forum; confirmed by independent analysis. Read disclosure ↗