Cambridge Analytica Scandal: 50M Facebook Profiles Accessed, Linked to Trump Campaign

Cambridge Analytica Scandal: 50 Million Facebook Profiles Accessed, Linked to Trump Campaign
This TechCrunch article from March 17, 2018, details the Cambridge Analytica scandal, revealing how the data firm, linked to the Trump campaign, allegedly harvested data from up to 50 million Facebook users. The report, citing The New York Times, highlights that Cambridge Analytica collaborated with Aleksandr Kogan, a psychology professor at the University of Cambridge. Kogan developed an app called "thisisyourdigitallife" which, when downloaded by approximately 270,000 users, granted access to their geographic information and, critically, their friends' data, potentially impacting millions more.
Lax API Policies and Data Access
The article emphasizes the evolving nature of Facebook's API (Application Programming Interface) policies. In 2014, when the data was reportedly acquired, Facebook's APIs were less restrictive, allowing developers to access broader user data, including friend lists. Facebook's Chief Security Officer at the time, Alex Stamos, initially tweeted about the situation, explaining that such data access was permissible under the existing policies. He later deleted his tweets, clarifying that while it wasn't a traditional "breach," the situation exposed vulnerabilities in API policies. These policies were subsequently updated in 2015 to restrict access to friend data, a move that was met with controversy among app developers.
Broader Industry Context and Data Security
The piece also touches upon the wider context of data privacy and security within the tech industry. It draws parallels with other companies like Uber and Lyft, which have faced scrutiny over their data access practices. The article suggests that during periods of rapid growth, tech companies might prioritize expansion over implementing robust data guardrails. Facebook, with over 2 billion monthly active users by the end of 2014, faced significant challenges in managing such vast datasets.
Impact and Facebook's Response
Despite Facebook's classification of the incident as not a "breach," the article stresses its seriousness. It points out that targeted information on a significant portion of the electorate could have influenced election outcomes, especially in closely contested races. Facebook officially suspended Cambridge Analytica and its parent company, Strategic Communication Laboratories, late on Friday. However, the article suggests that Facebook might still be downplaying the full scope of the data acquired by Kogan.
Promotional Content
The article also includes promotional content for TechCrunch events, specifically highlighting the "TechCrunch All Stage" event in Boston, offering discounts for attendees. It lists other popular articles and provides links to TechCrunch's social media platforms.
Key Takeaways:
- Data Breach: Cambridge Analytica allegedly accessed data from up to 50 million Facebook users.
- Method: Data was obtained via the "thisisyourdigitallife" app created by Professor Aleksandr Kogan.
- Policy Issues: Lax Facebook API policies in 2014 enabled the broad data access.
- Impact: Concerns raised about data privacy and potential influence on election outcomes.
- Facebook's Action: The company suspended Cambridge Analytica but may be downplaying the leak's scale.
- Industry Trend: Rapid growth can lead tech companies to overlook data security measures.
This incident remains a critical case study in data privacy, ethical data handling, and the responsibilities of major technology platforms.