skip to main content

Facebook Privacy Breach Class Action 

This class action lawsuit is filed on behalf of all Canadians whose Facebook account credentials were stolen during the Facebook breach.

On September 28, Facebook Inc. (“Facebook”) announced that approximately 50 million user accounts worldwide may have been compromised in a massive security breach. Facebook has confirmed that, during the breach, millions of user accounts were hacked via a series of vulnerabilities in Facebook’s code relating to a video upload tool and the “View As” privacy tool. The hackers took advantage of these vulnerabilities to steal user access tokens and thus were able to “seize control” of affected user accounts. Although Facebook discovered the breach on September 25, 2018, the video upload tool has been available on Facebook since July 2017.

While the hackers had control of the breached user accounts, they had all of the powers the user had – i.e. they were able to post as the user, and to access all of the information that the users had uploaded to Facebook, as well as all of the information accessible to the users, including the private information of their friends which is not publicly available. Facebook has also confirmed that the hackers had the ability to use the stolen user access tokens to gain control of accounts on other websites (such as Instagram, Etsy, Airbnb, or Spotify) which permit users to log in using their Facebook account credentials.

Many Canadians who use Facebook were affected. Affected users should have been logged out of their Facebook accounts without warning, and received a message at the top of their News Feed when they logged back in, which stated: “Your privacy and security are important to us. We want to let you know about recent action we've taken to secure your account.”

Facebook’s Public Statement

View Facebook’s post originally published on September 28, 2018  here

Facebook Privacy Breach Class Action

Charney Lawyers PC and co-counsel have commenced a national privacy breach class action on behalf of all Canadians whose Facebook account credentials were stolen during the breach announced on September 28, 2018. The plaintiff asserts that Facebook failed to properly protect its users’ personal, private information.

Register for the Facebook Privacy Breach Class Action

All Canadians who were affected by the Facebook breach are encouraged to register to receive more information about the class action by emailing



The site is not designed to answer questions about your individual situation or entitlement. Do not rely upon the information provided on this website as legal advice in respect of your individual situation nor use it as a substitute for individual legal advice.

The information collected about potential class members will assist counsel in prosecuting the class action and assessing what damages were suffered by the class as a whole. Providing the information requested does not make you the client of Charney Lawyers. The court will ultimately decide who will be included as a class member.

This website will be updated from time to time to provide potential class members with information as it becomes available.