Facebook CEO Mark Zuckerberg. Photo: Zach Gibson/Getty Images

A Facebook bug in late September allowed outside apps to access photos they weren't supposed to, including some that users uploaded but hadn't posted. Facebook said on Friday.

Why it matters: Facebook is already facing skeptical users and regulators who believe it doesn't respect user privacy.

Details:

  • "When someone gives permission for an app to access their photos on Facebook, we usually only grant the app access to photos people share on their timeline. In this case, the bug potentially gave developers access to other photos, such as those shared on Marketplace or Facebook Stories," the company said in a blog post. "The bug also impacted photos that people uploaded to Facebook but chose not to post."
  • Facebook told TechCrunch the bug was discovered and fixed on Sept. 25, had lasted for 12 days, and may have affected up to 6.8 million users and up to 1,500 apps built by 876 developers.

Ireland's data protection regulator said it had opened an investigation this week into Facebook's data practices, including this breach. The company's privacy practices are also under investigation by the U.S. Federal Trade Commission.

Our thought bubble: Every tech company experiences bugs, but Facebook's massive user base means any flaw can affect millions. Moreover, the company has once again failed to disclose a privacy issue in a timely manner — a pattern that doesn't strengthen trust.

Editor's note: This story was updated with more details about investigations of Facebook's practices around the world.

Go deeper

Updated 12 mins ago - Politics & Policy

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Politics: Biden ahead in Wisconsin, Michigan as cases surge in the Midwest.
  2. Health: Fauci says U.S. may not return to normal until 2022 — Trump's testing czar: Surge "is real" and not just caused by more tests Some coronavirus survivors have "autoantibodies."
  3. Business: Consumer confidence sinking Testing is a windfall.
  4. World: Europe faces "stronger and deadlier" wave France imposes lockdown Germany to close bars and restaurants for a month.
  5. Sports: Boston Marathon delayed MLB to investigate Dodgers player who joined celebration after positive COVID test.

Deadly Hurricane Zeta slams U.S. Gulf Coast

A satellite image of Hurricane Zeta. Photo: National Hurricane Center/NOAA

Hurricane Zeta has killed at least one person after a 55-year-old man was "electrocuted by a downed power line" in Louisiana as the storm caused widespread power outages Wednesday night, per AP.

What's happening: Zeta made landfall south of New Orleans as a Category 2 hurricane earlier Wednesday before weakening to Category 1. But it was still "battering southeastern Louisiana and southern Mississippi with life-threatening storm surge, high winds, and heavy rain" late Wednesday, per the National Hurricane Center.

3 hours ago - Health

Fauci says U.S. may not return to normal until 2022

Director of the National Institute of Allergy and Infectious Diseases, Anthony Fauci, testifies during a September Senate hearing on COVID-19 in Washington, D.C. Photo: Graeme Jennings/Pool/AFP via Getty Images

NIAID director Anthony Fauci told the Journal of the American Medical Association on Wednesday he doesn't expect a COVID-19 vaccine to be ready until January 2021 or later.

What he's saying: Fauci said during the interview that the U.S. was in a "bad position" after failing to keep case numbers down post-summer. "We should have been way down in baseline and daily cases and we’re not," he said.