In an update about the recent data breach of at least 50 million accounts, Facebook said it has not found any evidence so far that the attackers accessed any apps using Facebook Login. Guy Rosen, VP of product management, said Facebook reached the conclusion after analysing its logs for all third-party apps installed or logged in during the attack.
The company said it now building a tool that will let develop manually identify the users of their apps who have been affected, so that they can log them out in case of any other event. Rosen again apologised for the attack and said he will continue to update people as the company finds out more.
In the immediate aftermath of the event, Facebook reset all the access tokens of the almost 50 million accounts it knew were affected, plus of another 40 million that were subject to the vulnerability found, last year. Resetting access tokens protects the security of people’s accounts and meant those affected had to log back in to Facebook or any of the apps that use Facebook Login.
