Facebook Stored Up to 600 Million User Passwords in Plain Text Facebook engineers built applications that stored unencrypted passwords on internal servers which could be searched by over 20,000 employees.

By Matthew Humphries

This story originally appeared on PCMag

via PC Mag

It looks as though Facebook is in hot water once again today as it has been revealed up to 600 million Facebook users had their passwords stored in plain text on the social network's internal servers as far back as 2012.

As KrebsonSecurity reports, a Facebook source who asked for anonymity confirmed that between 200 and 600 million users had their passwords stored free of encryption on the company's servers. The data was being collected by a number of applications, leaving them available to view in plain text. The internal servers are accessible by over 20,000 employees, meaning any of them could have searched the list and potentially abused the data.

Facebook is thought to be carrying out an internal investigation to see how this managed to happen. What's of most concern is around 2,000 Facebook engineers are thought to have queried the password data over nine million times.

Scott Renfro, an engineer at Facebook, has confirmed to Krebs that Facebook users will be informed of what happened today, but that, "We've not found any cases so far in our investigations where someone was looking intentionally for passwords, nor have we found signs of misuse of this data." Before that happens, Facebook has been looking to see which, if any of the passwords have, "signs of abuse" because it's only those users that will need to be told to change their password. As it currently stands, no resets are expected to be necessary.

Facebook has known about the plain text passwords since January when a review carried out by security engineers noticed the passwords being logged. A task force was then created to review the situation and an investigation carried out so as to instigate, "long-term infrastructure changes to prevent this going forward."

A written statement from Facebook sent to Krebs states that notifications will be sent to, "hundreds of millions of Facebook light users, tens of millions of other Facebook users, and tens of thousands of Instagram users."

Matthew Humphries

Senior Editor

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Business News

What's Open on Easter Sunday? Costco and Target Will Close, But One Major Retailer Will Be Open. Here's What To Know.

The stock market was closed for Good Friday on April 18. Here's what's closed for Easter Sunday, April 20.

Side Hustle

This Couple Started a Side Hustle to Improve a 'Terribly Made' Bathroom Essential. Now the Business Earns More Than $3 Million a Year.

Michael Fine and Lisa Schulner-Fine launched lifestyle brand Quiet Town in 2016 and have been growing it ever since.

Business Ideas

70 Small Business Ideas to Start in 2025

We put together a list of the best, most profitable small business ideas for entrepreneurs to pursue in 2025.

Living

The 3 Lifestyle Habits That Made Me Sharper, Stronger and More Successful

These three simple yet powerful lifestyle changes transformed my productivity, energy and mindset. Here's how you can do the same.

Business Solutions

You and Your Kids Can Develop Future-Proof Tech Skills for Only $56

Develop future-proof tech skills even if you have no previous tech experience, such as data storytelling, Python, ChatGTP, Internet of Things and more.

Marketing

If You're Using ChatGPT This Way as a Marketer, You're Missing Out on Its Full Potential. Here's How to Maximize Your Results.

The real value of AI isn't in what you ask — it's in how you shape the conversation. Mastering prompt interactions means better content, sharper thinking and fewer generic outputs.