I know of two instances:
1) Facebook had a "View as" bug that allowed anyone to view anyone else's private page as that person.
2) Cambridge Analytica in which Facebook shared private information with third-parties under an NDA.
1) Facebook had a "View as" bug that allowed anyone to view anyone else's private page as that person.
2) Cambridge Analytica in which Facebook shared private information with third-parties under an NDA.