Facebook faces heavy fine for 'API bug' data breach in Turkey

Turkey's Personal Data Protection Authority (KVKK) said on Friday it had fined Facebook a total of 1.65 million lira ($270,976.01) in April due to a data breach. It cited a Facebook statement from December as saying the company had discovered a photo API bug that allowed third-party applications to access Facebook user photos.

KVKK said that around 300,000 users in Turkey may have been affected by this data breach. It also said that the API bug occurred for 12 days in September last year and Facebook not intervening in time showed there were deficiencies in technical precautions regarding the issue.