Data Of Millions Of Android Users On Twitter & Facebook Got Exposed

Millions of Android users using both Facebook and Twitter have had their data improperly accessed by some third-party apps on the Google Play Store when they logged into those apps.

Security researchers uncovered that One Audience and Mobiburn software development Kits (SDK) provided access to users data, including email addresses, usernames, and recent tweets on both platforms.

Twitter and Facebook have both admitted that some users data were improperly by some third-party apps, and says they will likely notify those whose information was shared.

"We recently received a report about a malicious mobile software development kit (SDK) maintained by One Audience. We are informing you about this today because we believe we have a responsibility to inform you of incidents that may impact the safety of your personal data or Twitter account," Twitter said.


A Facebook told The Verge that the social giant has also removed the apps from its platform after an investigation that showed they violated its platform policies.

"After investigating, we removed the apps from our platform for violating our platform policies and issued cease and desist letters against One Audience and Mobiburn," the Facebook spokesperson said.

Also Read: GBWhatsApp Shuts Down Permanently For Good

"We plan to notify people whose information we believe was likely shared after they had granted these apps permission to access their profile information like name, email and gender."

For now, the issues seems to have only affect Android users alone, iOS users were not impacted. Twitter has informed Google and Apple about the malicious SDK so that they can take further action if need be.

"We will be directly notifying people who use Twitter for Android who may have been impacted by this issue," Twitter said.

We have evidence that this SDK were used to access people's personal data for at least some