Facebook Sues Ukrainian Data Scraper

Facebook continues to sue companies and individuals that perform data scraping on their website. Following a suit against a Portuguese company in January of 2021, the newest case is targeted towards a Ukranian computer programmer named Alexander Solonchenko. Solonchenko was able to scrape the personal details of Facebook users by exploiting the “contact import” feature used by Facebook until it was discontinued in September 2019. This feature was widely known to be susceptible to leaking data. Using just a phone number, an attacker could receive information about any associated Facebook accounts including names, Facebook IDs, and other data that was public on their profiles. Solonchenko allegedly used an automated tool disguised as an Android device to scrape the Facebook information of millions of random phone numbers. They then sold the information on the infamous hacking forum RaidForums under the usernames “Barak_Obama” and “Solomame” in October of 2020. Solonchenko was eventually tracked down due to using the same username and contact information on a job portal. Facebook filed a lawsuit with the Federal District Court of the Northern District of California and requested Solonchenko to be banned from accessing the Facebook website.