A database containing over 419 million Facebook users' phone numbers was found online without password protection. The database included phone numbers linked to Facebook accounts, as well as other information such as names, genders, and locations. Facebook claims the data is old and was scraped before the company restricted access to phone numbers. The exposure of this data puts users at risk of spam calls and SIM-swapping attacks.