Facebook App Maker Hit With Data-Breach Class Action

RockYou, the popular provider of third-party apps for Facebook, MySpace and other social-networking services, is being hit with a proposed class-action accusing the company of having such poor data security that at least one hacker got away with 32 million e-mails and their passwords. The suit accuses the maker of apps like “Slideshow” for MySpace and “Superwall” for Facebook of making its unencrypted customer data “available to even the least capable hacker.” “RockYou failed to use hashing, salting or any other common and reasonable method of data protection and therefore drastically exacerbated the consequences of a hacker bypassing its outer layer of web security,” according to the Monday complaint in San Francisco federal court. So-called SQL injection vulnerabilities are among the top online security defects.

Tags: albert-gonzalez, apps, breaches, consequences, data, facebook, government, hacker-charged, party, passport-hacker, passwords, security, social