March 1, 2018
2948 days ago
500.0K
Confirmed
Misconfiguration
Technology
Google exposed the private data of hundreds of thousands of users of the Google+ social network and then opted not to disclose the issue this past spring, in part because of fears that doing so would draw regulatory scrutiny and cause reputational damage. Shortly after the story was published, Google announced that it will shut down consumer access to Google+ and improve privacy protections for third-party applications. In a blog post about the shutdown, Google disclosed the data leak, which it said potentially affected up to 500,000 accounts. Up to 438 different third-party applications may have had access to private information due to the bug, but Google apparently has no way of knowing whether they did because it only maintains logs of API use for two weeks.