Thread by @profcarroll

You can now check @haveibeenpwned to see if your Facebook account data is among the half-billion leaked and circulating. You know that breach that Facebook insists has no responsibility for because it’s an “old” breach. haveibeenpwned.com

FWIW I deactivated my Facebook in 2018 so it was protected from the breach. The only safe account is an inert or deleted account.

CAVEAT: @haveibeenpwned only checks if your email is in leaked data. Most of the Facebook records are uniquely identifiable by phone number, not emails. So unless someone else builds a phone query tool or Facebook notifies folks… ¯\_(ツ)_/¯

PSA: Use the phone number lookup instead of @haveibeenpwned

https://twitter.com/evacide/status/1379238511442685952