Actions to Make Your Business Account More Secure

Facebook Business

September 28, 2018

On September 25, Facebook engineers discovered that attackers exploited a vulnerability in Facebook's code that impacted "View As", a feature that lets people see what their own profile looks like to someone else. This allowed them to steal Facebook access tokens, which they could then use to take over people's accounts.

We’ve fixed the vulnerability, informed law enforcement and reset compromised tokens so attackers can no longer use them to log in. We don't yet know if any accounts were accessed using these stolen tokens, but we are working to proactively identify any unauthorized access.

Detecting and preventing fraud is extremely important and something we take very seriously. While we have not detected any malicious activity with business accounts, our investigation is ongoing.

Businesses don't need to take any action in response to this incident, but here are some steps you can take to further secure your account:

1. We recommend checking your contact information in Account Settings. There’s no need to change your password, but having accurate email and phone information will allow you to regain access to your account if you forget your password.
2. If you administer a Facebook Page, Group, app, ad account or business, we encourage you to check roles and permissions on your account for any unauthorized changes or new admins you don't recognize. If you detect any unauthorized admins or think someone may have gained access to your account, please visit the Help Center to report the issue.

   Watching Video

3. We also recommend you do the following to check for any unrecognized activities:

• Look for changes to payment details in Payment Settings on your account.
• Review active campaigns in Ads Manager to check for changes to ads, bids or budgets.
• Look for any listings you did not create on your Marketplace account.

If you detect any unrecognized changes or unauthorized activities on your account, please visit the Help Center to report the issue.

Tags

Announcements