2018 Google data breach
2018 Google data breach
Main page
94542

2018 Google data breach

logo
Community Hub0 subscribers
Read side by side
2018 Google data breach
View on Wikipedia
from Wikipedia
A photograph of Vic Gundotra.
Vic Gundotra, Google+ lead at the time of the leaks.

The 2018 Google data breach was a major data privacy scandal in which the Google+ API exposed the private data of over five hundred thousand users.[1]

Google+ managers first noticed harvesting of personal data in March 2018,[2] during a review following the Facebook–Cambridge Analytica data scandal. The bug, despite having been fixed immediately, exposed the private data of approximately 500,000 Google+ users to the public.[3] Google did not reveal the leak to the network's users.[4] In November 2018, another data breach occurred following an update to the Google+ API. Although Google found no evidence of failure, approximately 52.5 million personal profiles were potentially exposed.[5] In August 2019, Google declared a shutdown of Google+ due to low use and technological challenges.[6][7][8]

Overview of Google+

[edit]

Google+ was launched in June 2011 as an invite-only social network,[9] but was opened for public access later in the year. It was managed by Vic Gundotra.[10]

Similar to Facebook, Google+ also included key features Circles, Hangouts and Sparks.

  • Circles let users personalize their social groups by sorting friends into different categories. Once allowed into a Circle, users could regulate information in their individual spaces.[11]
  • Hangouts included video chatting and instant messaging between users.[12]
  • Sparks allowed Google to track users' past searches to find news and content related to their interests.[13]

Google+ was linked to other Google services, such as YouTube, Google Drive and Gmail, giving it access to roughly 2 billion user accounts.[14] However, less than 400 million consumers actively used Google+, with 90% of those users using it for less than five seconds.[15]

The breaches

[edit]

In March 2018, Google developers found a data breach within the Google+ People API in which external apps acquired access to Profile fields that were not marked as public.[3] According to The Wall Street Journal, Google didn’t disclose the breach when it was first discovered in March to avoid regulatory scrutiny and reputational damage.[4]

500,000 Google+ accounts were included in the breach, which allowed 438 external apps unauthorized access to private users' names, emails, addresses, occupations, genders and ages.[3] This information was available between 2015 and 2018.[16] Google found no evidence of any user's personal information being misused, nor that any third-party app developers were aware of the leak.

In November 2018, a software update created another data breach within the Google+ API.[17] The bug impacted 52.5 million users,[18][2] where, similarly to the March breach, unauthorized apps were able to access Google+ profiles, including users' names, email addresses, occupations and ages. Apps could not access financial information, national identification, numbers, or passwords. Blog posts, messages and phone numbers also remained inaccessible if marked as private. Unlike the previous breach, access was only available for six days before Google+ learned of the breach. Once more, Google+ found no evidence of data being misused by third-party developers.

Responses

[edit]

In October 2018, the Wall Street Journal published an article outlining the initial breach and Google's decision to not disclose it to users.[4] At the time, there was no federal law that required Google to inform their consumers of data breaches. Google+ originally did not disclose the breach out of fears of being compared to Facebook's recent data leak and subsequent loss of consumer confidence.[4] In response to the Wall Street Journal article, Google announced the shutdown of Google+ in August 2019.[19] After the second data leak, the date was moved to April 2019.[20] In response to the data breach, enterprise consumers were notified of the bug's impact and given instructions on how to save, download and delete their data prior to the Google+ shut down. Google's Privacy and Data Protection Office found no misuse of user data.

Prior to the Google+ shutdown, Google set a 10-month period in which users could download and migrate their data. After the 10-month period, user content was deleted. On 4 February 2019, consumers were no longer able to create new Google+ profiles.[21] Google shut down Google+ APIs on 7 March 2019 to ensure that developers did not continue to rely on the APIs prior to the Google+ shutdown.[7][16]

Google is the principal entity of its parent company, Alphabet Inc. After the data breach, Alphabet Inc. share prices fell by 1% to $1,157.06 on 9 October 2018 after an earlier drop of $1,135.40 that morning, the lowest price since 5 July 2018.[22] After the publication of The Wall Street Journal article, share prices dropped as low as 2.1% in two days on 10 October 2018. Share prices steadily increased from this point and met the 8 October 2018 share price on 5 February 2019.[23]

Google planned to rebuild Google+ as a corporate enterprise network.[24] Google Play will now assess which apps can ask for permission to access the user's SMS data. Only the default app for telephone distribution is able to make requests. Prior to the data breaches, apps were able to request access to all of a consumer's data simultaneously. Now, each app must request permission for each aspect of a consumer's profile.

References

[edit]
Revisions and contributorsEdit on WikipediaRead on Wikipedia

2018 Google data breach

View on Grokipedia
from Grokipedia
The 2018 Google data breaches consisted of two distinct software vulnerabilities in the Google+ social networking platform's application programming interfaces (APIs), which enabled third-party developers to access private user profile data without consent.[1][2] The first incident, active from 2015 until its discovery and patch in March 2018, stemmed from an API design flaw that potentially exposed non-public fields—such as full names, email addresses, occupations, genders, and ages—for up to 500,000 users to external applications.[1][3] Google elected not to publicly disclose this vulnerability at the time, citing an internal assessment that no data had been misused and concerns over potential regulatory scrutiny akin to that faced by competitors.[1] The second breach occurred in November 2018, when a bug introduced via a software update on November 7 exposed profile details—including names, genders, email addresses, birth dates, relationship statuses, occupations, and residences—for approximately 52.5 million users over a six-day period before detection and correction.[4][2] As with the prior event, Google reported no evidence of exploitation by developers, attributing the issue to an unintended API behavior during the update process.[4] These incidents, uncovered amid Google's broader "Project Strobe" privacy audit, eroded public confidence in Google+'s data handling practices and accelerated the platform's consumer shutdown from August 2019 to April 2019, while also prompting the immediate deprecation of its APIs.[5][4] Subsequent legal actions, including shareholder lawsuits alleging concealment of risks, culminated in a $350 million settlement by Alphabet Inc. in 2024, underscoring tensions between corporate risk assessment and transparency obligations in data privacy governance.[6]

Background

Google+ origins and purpose

Google+ originated as Google's most ambitious attempt to enter the social networking space, launched on June 28, 2011, following the company's earlier, less successful ventures such as Orkut, Google Buzz, and Google Wave.[7] These prior efforts had failed to gain significant traction, prompting Google to consolidate its social strategy under a unified platform aimed at integrating user identity and interactions across its broader ecosystem of services.[7] The project was spearheaded by Vic Gundotra, Google's Senior Vice President of Engineering, who had joined the company in 2007 and was instrumental in driving the development of social features.[8] The primary purpose of Google+ was to challenge Facebook's dominance in social networking by emphasizing user-controlled sharing and seamless integration with Google products like Gmail, YouTube, and later Google Drive.[9] Google positioned the platform as a means to make online interactions more akin to real-life relationships, with built-in tools for selective sharing that addressed privacy concerns prevalent in competitors.[9] This integration strategy sought to leverage Google's vast user data and search infrastructure to create a "social layer" enhancing personalization and connectivity, rather than merely replicating Facebook's model.[10] Initial rollout was limited to a field trial via invitations, reflecting Google's intent to refine the service before broader public access.[7]

Platform features and user base

Google+ operated as a social networking service integrated with Google's ecosystem, emphasizing selective sharing through Circles, which allowed users to categorize contacts into groups such as family, friends, or colleagues for targeted post visibility.[11] The platform's Stream functioned as a chronological feed aggregating updates, photos, videos, and links from selected circles, while the +1 button enabled content endorsements that influenced search results and recommendations across Google properties.[12] Additional features included Hangouts for instant messaging, video calls, and group chats; automatic photo uploads and editing via Google Photos integration; Communities for interest-based group discussions; and Collections for curating themed content boards.[13] These tools aimed to facilitate "real-life sharing" by prioritizing privacy controls and multimedia interactions over broad public broadcasting.[11] The platform's user base derived largely from Google's existing account holders, as profiles were auto-generated for Gmail and other service users unless manually deleted, resulting in an estimated hundreds of millions of profiles by 2018.[14] A November 2018 API vulnerability potentially exposed data from 52.5 million such profiles, underscoring the scale of registered but often inactive accounts.[4] Active engagement remained low, however, with the service struggling against dominant competitors like Facebook; third-party analyses indicated limited monthly visits, such as around 34 million unique ones reported in early 2018, predominantly from U.S. users comprising over half the audience.[15] This dormant majority reflected Google+'s integration-driven growth rather than organic adoption, contributing to its characterization as a "ghost town" with minimal daily interactions by late 2018.[16]

Technical Vulnerabilities

March 2018 API bug

In March 2018, Google identified a software bug in its Google+ People API, which had existed since the platform's consumer launch in 2015. The flaw stemmed from the API's unintended interaction with a single backend database, enabling third-party applications to retrieve private profile fields that users had not marked as public. Affected fields included full name, email address, occupation, gender, age, and profile photo.[17][18] The vulnerability potentially impacted up to 500,000 Google+ user profiles, though the exact number of exposed records remains unconfirmed due to the absence of logged access attempts. Google engineers detected the issue during internal testing and applied a patch on the same day, restoring compliance with the API's access controls. No logs indicated exploitation by developers, and Google reported no evidence of data misuse or unauthorized retrieval during the period the bug was active.[17][5][19] Technical analysis post-discovery attributed the bug to a mismatch in how the API queried and returned data, bypassing visibility restrictions intended to limit third-party access to only consented public information. This incident highlighted risks in API design for social platforms, where granular permissions can fail under edge-case database interactions, though Google maintained that the platform's low developer engagement minimized broader exposure.[17][18]

November-December 2018 API exposure

In November 2018, a software update to the Google+ People API on November 7 inadvertently created a bug that enabled third-party applications with permission to access a user's public profile data to also retrieve private profile fields, such as full names, birth dates, email addresses, employment history, gender, and residence information.[2][20] This vulnerability affected approximately 52.5 million Google+ user accounts, though Google stated there was no evidence that any developer exploited the bug or that user data was misused during the exposure period, which lasted nearly a week.[14][21] Google internally identified and patched the API bug shortly after its introduction, preventing further exposure, but the company delayed public disclosure until December 10, 2018, as part of its broader Project Strobe review of third-party API security following an earlier incident.[2][22] The revelation prompted Google to accelerate the shutdown of all Google+ APIs to within 90 days and expedite the consumer-facing Google+ platform's closure by April 2019, citing repeated vulnerabilities as undermining consumer trust.[23][21] Unlike the March 2018 bug, which involved unauthorized scraping of up to 500,000 profiles, this incident stemmed from flawed permission scoping in the API update rather than a broader access control failure, though both highlighted ongoing issues in Google's handling of private data in social APIs.[20][14]

Disclosure and Immediate Responses

Internal handling and decision-making

Google discovered a software bug in its Google+ People API in March 2018, which enabled third-party applications to access private user profile data such as full names, email addresses, birthdates, gender, and relationship status for approximately 500,000 users without consent.[1] The vulnerability stemmed from improper handling of API permissions, allowing apps approved via Google's developer console to retrieve data from profiles not shared publicly with those apps.[24] Internal engineering teams promptly disabled the affected API and conducted an audit, finding no evidence that any developer had become aware of or exploited the bug during its existence.[25] Senior Google executives then engaged in decision-making deliberations, reviewing an internal memo that outlined the potential fallout from public disclosure, including heightened regulatory scrutiny from bodies like the Federal Trade Commission and comparisons to Facebook's Cambridge Analytica scandal.[1] [26] The memo emphasized risks such as broader inquiries into Google's data practices and negative media coverage, weighing these against the absence of demonstrated harm or data misuse, ultimately leading to a decision against voluntary disclosure to users or regulators.[27] This choice deviated from expectations of transparency in data exposure incidents, prioritizing avoidance of "repercussions" over proactive notification, as later criticized by U.S. Senators who demanded the memo's release to assess accountability.[26] [28] Following the Wall Street Journal's October 8, 2018, reporting on the undisclosed March incident, Google accelerated internal reviews of its APIs, uncovering a second bug in the Google+ API introduced by a November 7, 2018, software update.[2] This flaw exposed profile data—including names, addresses, and phone numbers—for about 52.5 million users to external developers, though again with no confirmed abuse after swift patching on December 3, 2018.[4] In contrast to the prior handling, executives opted for immediate public disclosure on December 10, 2018, announcing the expedited shutdown of all Google+ consumer APIs within 90 days to mitigate ongoing risks.[4] This shift reflected lessons from the first incident's exposure, prioritizing transparency amid mounting external pressure.[24]

Public announcements and fixes

On October 8, 2018, Google disclosed via its official blog that a bug in the Google+ People API, present since 2015, had been identified and patched in March 2018, potentially allowing unauthorized third-party apps to access private profile fields—including full names, email addresses, occupations, gender, and age—from up to 500,000 user accounts.[17] The company emphasized that internal reviews found no evidence of the exposed data being accessed or misused by external developers.[17] In immediate response, Google initiated Project Strobe, a comprehensive audit of third-party API access to user data across its services, and announced the phased wind-down of consumer Google+ functionality by August 2019 to prioritize privacy enhancements.[17] On December 10, 2018, Google announced a second API vulnerability, stemming from a November 7 update to the Google+ API, which briefly exposed profile information—such as names, email addresses, home addresses, birthdates, gender, phone numbers, employment details, and relationship status—from 52.5 million user profiles to external applications over a six-day period before being rectified.[4] Google again reported no detected instances of data exploitation during the exposure window.[4] To mitigate further risks, the firm expedited the complete shutdown of all Google+ APIs within 90 days and advanced the consumer platform's termination from August to April 2019, while notifying affected enterprise users and providing data export options.[4] These actions were framed as part of ongoing commitments under Project Strobe to restrict unnecessary data access scopes in APIs.[4]

Controversies

Delayed disclosure rationale

Google identified the March 2018 Google+ API bug during an internal privacy review triggered by the Facebook-Cambridge Analytica scandal, with the vulnerability having potentially exposed private profile data—such as names, email addresses, occupations, genders, and ages—of up to 500,000 users to third-party developers from 2015 until its patch in March 2018.[1][3] The company stated publicly that it found no evidence any developer had accessed or misused the data, asserting this as a key factor in withholding disclosure, as internal assessments deemed the incident low-risk absent confirmed exploitation.[17][29] However, internal memos reviewed by The Wall Street Journal indicated executives overrode recommendations from engineering teams to disclose the bug, primarily due to fears of inviting regulatory investigations and reputational damage akin to Facebook's post-Cambridge Analytica fallout, with one document explicitly noting concerns over "immediate regulatory interest" and scrutiny from bodies like the Federal Trade Commission.[1] Google's decision reflected a calculus prioritizing avoidance of public and legal repercussions over proactive transparency, as evidenced by the six-month silence despite the bug's discovery aligning with heightened industry focus on data privacy following major scandals.[24] The delay drew criticism for undermining user trust and echoing patterns of corporate self-preservation in tech, with privacy advocates arguing it exemplified a broader reluctance to self-report vulnerabilities without external pressure; disclosure finally occurred on October 8, 2018, only after The Wall Street Journal informed Google of its forthcoming exposé based on the internal documents.[24][30] In contrast to the rapid patching, the nondisclosure rationale hinged on probabilistic risk assessment—no confirmed harm meant no obligation under prevailing norms—but this approach amplified perceptions of opacity, contributing to accelerated plans to sunset consumer Google+.[17][31]

Comparisons to peer company breaches

The 2018 Google+ breaches, involving API vulnerabilities that exposed profile data without evidence of external exploitation, bore similarities to contemporaneous incidents at peer social platforms, particularly Facebook's September 2018 security compromise. Both cases stemmed from software flaws enabling unauthorized access to user information: Google+'s March bug in the People API permitted third-party developers to scrape private fields like names, emails, and occupations from up to 500,000 profiles, while Facebook's "View As" feature vulnerability allowed attackers to steal access tokens from approximately 50 million accounts, potentially granting full profile control including private messages and friends lists.[1][32] Neither incident showed confirmed data misuse by outsiders, with Google stating no evidence of abuse in its exposures and Facebook reporting no observed token exploitation beyond the initial theft.[5][33]
AspectGoogle+ (March 2018 Bug)Facebook (September 2018 Breach)
Affected UsersUp to 500,00050 million (plus 40 million via linked accounts)[32]
Data ExposedProfile names, emails, occupations, agesAccess tokens enabling full account takeover[32]
Discovery & FixDiscovered and patched March 2018Detected September 25, 2018; immediate mitigation[2]
Disclosure TimingDelayed until October 8, 2018, amid fears of scrutiny akin to Facebook's earlier scandals[1]Prompt, on September 28, 2018[32]
Immediate ResponseNo user notifications; internal decision to withhold public report[1]Forced logouts for 90 million users; enhanced security checks[32]
Google's internal rationale for nondisclosure explicitly referenced avoiding parallels to Facebook's Cambridge Analytica revelations earlier that year, which involved API misuse affecting 87 million users but lacked a traditional breach vector, highlighting a pattern of tech firms grappling with API-related privacy risks in consumer-facing platforms.[1] In contrast to Facebook's swift transparency—which triggered congressional hearings and a $5 billion FTC settlement in 2019—Google's delay amplified criticism, accelerating Google+'s consumer shutdown from August 2019 to April 2019.[34][25] The December 2018 Google+ exposure of 52.5 million users via another API flaw mirrored these issues in scale but prompted faster fixes and disclosures, underscoring iterative vulnerabilities in underutilized social APIs compared to Facebook's more robust, high-traffic infrastructure.[2] Broader peer comparisons reveal Google's incidents as less severe in exploitation risk than events like Uber's 2016 breach (disclosed 2017), which exposed 57 million users' credentials and led to a $148 million fine for delayed reporting, or Equifax's 2017 hack of 147 million records via unpatched software—though not a direct social peer, it illustrates systemic API and patch management failures across sectors.[35] Unlike these, Google+ cases involved no confirmed theft or ransom demands, aligning more closely with inadvertent exposures than malicious intrusions, yet the nondisclosure echoed patterns of reputational risk aversion seen in peers.[36][37]

Regulatory and Legal Aftermath

Investigations by authorities

Following the October 8, 2018, disclosure of the March 2018 Google+ API bug, U.S. Senators Edward Markey, Richard Blumenthal, and others urged the Federal Trade Commission (FTC) to launch an investigation into Google's handling of the incident, citing the company's internal decision to withhold public notification as evidence of a "culture of concealment" and potential violation of its 2011 FTC consent decree.[38] [39] That decree, stemming from prior privacy misrepresentations in Google's Buzz rollout, mandated comprehensive security programs, regular audits, and safeguards against unauthorized data access, with non-compliance risking civil penalties.[40] Critics argued the six-month delay in disclosure breached these obligations, especially absent evidence of third-party misuse, as Google internally assessed no data had been exploited despite potential exposure of profile fields like names, emails, and occupations for up to 500,000 users.[1] The FTC, which had previously fined Google $22.5 million in 2012 for consent decree violations related to Safari tracking, did not publicly initiate or announce a formal probe into the Google+ exposures. No enforcement actions, settlements, or penalties directly tied to the 2018 incidents emerged from the agency, despite the decree's requirement for Google to notify the FTC of certain compliance failures.[41] In the European Union, where the General Data Protection Regulation (GDPR) took effect on May 25, 2018—after the first bug's fix but before the December disclosure—no data protection authorities launched reported investigations into the API vulnerabilities.[5] The incidents predated or coincided with GDPR's breach notification rules (Article 33), which mandate reporting to authorities within 72 hours if risks to individuals' rights are likely; Google maintained no such risk materialized, as logs showed no unauthorized access or downloads for either the March (up to 500,000 users) or November-December (52.5 million users) exposures.[2] EU regulators issued unrelated GDPR fines against Google totaling €50 million in 2019 for consent and transparency issues in advertising, but these pertained to broader practices, not the Google+ APIs. The absence of formal probes reflects, in part, the lack of demonstrated harm and Google's proactive patching, though it drew scrutiny amid heightened post-Cambridge Analytica focus on tech privacy lapses.

Shareholder and class-action outcomes

Following the disclosure of the Google+ API bugs in 2018, shareholders filed a securities class-action lawsuit against Alphabet Inc., Google's parent company, alleging that executives had concealed the data exposures to mislead investors about the platform's privacy risks and operational stability. The suit, initiated in the U.S. District Court for the Northern District of California, claimed that Google knew of the March 2018 bug—which potentially affected data from 500,000 users including names, emails, and birth dates—since at least early 2018 but delayed public revelation to avoid reputational harm, leading to inflated stock prices until the truth emerged.[42][43] In February 2024, Alphabet agreed to a $350 million settlement to resolve the shareholder claims without admitting liability, covering purchases of Alphabet Class A and Class C shares between March 16, 2018, and October 25, 2018. The settlement received preliminary court approval, with final approval pending distribution to eligible shareholders after deductions for fees and costs; attorneys sought up to $66 million in fees from the fund. This resolution addressed allegations of violations under Sections 10(b) and 20(a) of the Securities Exchange Act of 1934, stemming from the non-disclosure of the API vulnerabilities that persisted for months despite internal awareness.[6][44][45] Separately, a consumer class-action lawsuit over the Google+ breaches settled for $7.5 million in 2021, targeting affected users whose private profile data was exposed via the API flaws. This agreement provided modest payments to verified class members—up to $200 each for those proving harm—and required Google to enhance API security protocols, though critics noted the sum represented a fraction of potential damages given the scale of exposure. No admissions of wrongdoing were made, and the settlement followed consolidated actions emphasizing failures in data protection safeguards.[46][47]

Broader Impacts

Platform shutdown timeline

Google announced the initial shutdown of its consumer-facing Google+ platform on October 8, 2018, following the public disclosure of a data exposure affecting up to 500,000 users from a bug present between 2015 and March 2018.[48] The company planned a 10-month wind-down period, with full cessation of consumer services targeted for August 2019, while allowing users to export their data during the transition.[25] A second data exposure, identified in November 2018 and affecting profiles of 52.5 million users, prompted Google to accelerate the timeline on December 10, 2018.[14] Consumer access to Google+ was expedited to end in April 2019, rather than August, and all Google+ APIs were scheduled for sunset within 90 days to halt third-party developer access.[4] On January 30, 2019, Google detailed the phased closure for consumers: creation of new Google+ profiles, pages, communities, or events ceased as of February 4, 2019; posting and interactions ended on April 2, 2019; and all consumer data was deleted shortly thereafter, with enterprise versions for G Suite users continuing separately until August 2019.[49] The platform fully shut down for consumers on April 2, 2019, marking the end of public operations initiated by the 2018 incidents.[50]

Implications for data privacy practices

The 2018 Google+ API bugs exposed private profile data—including names, email addresses, occupations, ages, and genders—to unauthorized third-party apps, affecting up to 500,000 users in the March incident and approximately 52.5 million in the November update-related exposure.[1][4] These flaws stemmed from improper scoping in the People API, allowing apps to retrieve non-public fields despite user privacy settings, highlighting how rapid software updates can inadvertently bypass access controls.[51][5] In direct response, Google expedited fixes, notified affected users and enterprise customers, and shut down consumer Google+ APIs within 90 days while advancing the platform's overall sunset from August 2019 to April 2019.[4] The company also restricted API access to "trusted accounts," intensified audits of other APIs, and invested in automated detection tools for similar vulnerabilities, marking a shift toward proactive privacy engineering in developer ecosystems.[4][36] The incidents illuminated systemic risks in third-party data integrations, where expansive API permissions without granular consent mechanisms enable broad exposures even absent evidence of misuse—as Google reported no detected exploitation.[4][30] This prompted industry emphasis on data minimization principles, limiting APIs to essential fields and enforcing least-privilege access to reduce attack surfaces.[36] Regular privacy impact assessments and vulnerability scanning became de facto standards, as the bugs demonstrated how edge cases in permission logic can undermine user controls.[36] Google's internal rationale for withholding public disclosure of the March bug—citing potential regulatory scrutiny akin to Facebook's—revealed misaligned incentives in breach handling, where fear of backlash delayed transparency and eroded trust.[1][30] Critics, including privacy advocates, argued this approach exacerbated reputational harm upon revelation, advocating for standardized, shorter notification timelines to prioritize user agency over corporate risk avoidance.[5][30] Consequently, the breaches reinforced privacy-by-design frameworks, urging firms to embed consent verification, audit trails, and breach simulation testing from development outset, influencing post-2018 practices amid rising GDPR-like mandates.[36][30] Ultimately, the Google+ shutdown exemplified how recurrent privacy lapses can necessitate service termination, signaling to peers that unresolvable API risks warrant deprioritization over continued operation.[4] This outcome accelerated adoption of zero-trust architectures in data-sharing tools, with enhanced monitoring for anomalous app behaviors to safeguard against silent exposures.[36]

References

  1. Google Exposed User Data, Feared Repercussions of Disclosing to ...
  2. A New Google+ Blunder Exposed Data From 52.5 Million Users
  3. Google bug exposed the information of up to 500,000 users - CNBC
  4. Expediting changes to Google+ - The Keyword
  5. Google+ Security Bug -- What Happened, Who Was Impacted And ...
  6. Google Parent Alphabet Agrees to Pay Shareholders $350 Million ...
  7. Looking back at Google+ - TechCrunch
  8. Vic Gundotra, The Father Of Google+, Is Leaving Google After 8 Years
  9. Google+ launched to take on Facebook | Google | The Guardian
  10. Look who's admitting that Google+ is 'confusing' - CNBC
  11. Introducing the Google+ project: Real-life sharing, rethought for the ...
  12. An Introduction to Google+ - SitePoint
  13. What Is Google Plus and How to Properly Use It? - ODMsoft
  14. Google+ Shutdown Accelerated After 52.5 Million Users' Data ... - NPR
  15. Zion & Zion's 2018 Guide to Google+
  16. Life among the last Google+ users | The Verge
  17. Project Strobe: Protecting your data, improving our third-party APIs ...
  18. Google shuts down Google+ after API bug exposed details for over ...
  19. Google+ is Shutting Down After a Vulnerability ... - The Hacker News
  20. Google+ hit by second API bug impacting 52.5 million users | ZDNET
  21. Google says Google+ bug affected 52.5 million people - CNN
  22. Google Emails Users About Private Data Exposed by Google+ API ...
  23. Google+ to Shut Down Early After New API Flaw Hits 52.5 Million ...
  24. Google to shut down Google+ after failing to disclose user data leak
  25. Google Plus Will Be Shut Down After User Information Was Exposed
  26. U.S. Senators Demand Internal Memo Related to Google+ Incident
  27. Google Memo That Meant Google+ Was Kept Quiet - Business Insider
  28. Cortez Masto, Klobuchar Express Concern over Google's Decision ...
  29. Google+ Shutting Down For Consumers After Data Vulnerability Is ...
  30. The Google+ Bug Is More About The Cover-Up Than The Crime
  31. Google Plus security bug - CNBC
  32. Facebook Security Breach Exposes Accounts of 50 Million Users
  33. Facebook security breach details - CNBC
  34. This Is Why People No Longer Trust Google And Facebook ... - Forbes
  35. Data Breaches 2018: The 20 Biggest of the Year | Dashlane
  36. Google Data Breach: What Happened and How to Prevent It
  37. Facebook and Google Security Breaches | Identity Theft Software
  38. SENATORS DEMAND FTC INVESTIGATION INTO GOOGLE'S ...
  39. Two Democrat Senators Say Google+ Data Breach May Violate FTC ...
  40. Why Google Could Be in Trouble Over the Google Plus Bug
  41. FTC Act - Congress.gov
  42. Google to pay $350 million to settle shareholders' data privacy lawsuit
  43. Google Settles Google+ API Data Leak Lawsuit for $350M
  44. Google shareholder attorneys in data privacy case ask for $66 ...
  45. Google to pay $350M settlement in Google+ data breach
  46. $7.5 Million Settlement is Pending for Google+ Privacy Class Action
  47. Court Approves $7.5 Million Google's Data Breach Settlement
  48. Google+ to shut down after coverup of data-exposing bug
  49. Google Shares Final Google+ Shutdown Timeline | Extremetech
  50. Google+ shutdown after an eventful 2018 | Semper Plugins - AIOSEO
  51. Google will shut down Google+ four months early after second data ...
User Avatar
No comments yet.