--- description: A hacker set up a tool to collect Facebook employees’ usernames and passwords. title: Facebook Says a Recent Hack Attack Isn't a Big Deal image: https://static.time.com/v3/assets/bltea6093859af6183b/blt332f6309811cb4dd/6988907f196cf484a203b56b/facebook-hack-cyber-security-technology-social-media.jpg?branch=production&width=3840&quality=75&auto=webp&crop=16:9 ---  * [Business](/section/business/) ## Business Update your preferences in [Account Settings](/account/preferences/) Close * [Tech](/tag/time-section-tech/) ## Tech Update your preferences in [Account Settings](/account/preferences/) Close # Facebook Says a Recent Hack Attack Isn't a Big Deal by [David Meyer / Fortune](/author/fortune/) ## David Meyer / Fortune Update your preferences in [Account Settings](/account/preferences/) Close Apr 25, 2016 1:50 PM CUT  The app of Facebook is displayed on a smartphone on February 08, 2016 in Berlin, Germany. The app of Facebook is displayed on a smartphone on February 08, 2016 in Berlin, Germany.Thomas Trutschel—Photothek/Getty Images by [David Meyer / Fortune](/author/fortune/) ## David Meyer / Fortune Update your preferences in [Account Settings](/account/preferences/) Close Apr 25, 2016 1:50 PM CUT A security researcher who managed to hack through the security of one of Facebook’s corporate networks said he found evidence of another hacker having been there too, and having installed a backdoor to steal employees’ credentials. Penetration tester Orange Tsai, of Taiwanese cybersecurity firm Devcore, said the other hacker had set up a tool to collect and exfiltrate Facebook employees’ usernames and passwords as they logged in. He himself got in by exploiting vulnerabilities in third-party software, from a company called Accellion, that is used for file transfers. Tsai reported the vulnerabilities and his findings to Facebook, and got paid $10,000 under the company’s “Bug Bounty” scheme. On Hacker News, a member of Facebook’s security team thanked Tsai and claimed the other hacker in question was also a well-meaning individual trying to collect money under Facebook’s bug-hunting program. “Neither of them were able to compromise other parts of our infrastructure so, the way we see it, it’s a double win: two competent researchers assessed the system, one of them reported what he found to us and got a good bounty, none of them were able to escalate access,” Reginaldo Silva wrote. Silva also said that, because it had been using third-party software that it could not control, it had run the software “isolated from the systems that host the data people share on Facebook.” “We do this precisely to have better security,” he noted. Facebook had not responded to a request for comment at the time of writing. _This_ [_article_](http://fortune.com/2016/04/25/facebook-two-hackers/ "undefined") _originally appeared on_ [_Fortune.com_](https://fortune.com "undefined") ```json [{"@context":"https://schema.org","@type":"NewsArticle","@id":"https://time.com/4306317/facebook-hack-downplayed/","mainEntityOfPage":{"@type":"WebPage","@id":"https://time.com/4306317/facebook-hack-downplayed/"},"headline":"Facebook Says a Recent Hack Attack Isn't a Big Deal","datePublished":"2016-04-25T13:50:19.000Z","dateModified":"2026-04-13T08:49:53.818Z","description":"A hacker set up a tool to collect Facebook employees’ usernames and passwords","url":"https://time.com/4306317/facebook-hack-downplayed/","keywords":["Tech","Social Media","Technology","Security","cyber security"],"thumbnailUrl":"https://static.time.com/v3/assets/bltea6093859af6183b/blt332f6309811cb4dd/6988907f196cf484a203b56b/facebook-hack-cyber-security-technology-social-media.jpg?branch=production&width=1200&quality=75&auto=webp&crop=1200:675&height=675","author":[{"@type":"Person","name":"David Meyer / Fortune"}],"articleSection":"Business","image":[{"@type":"ImageObject","url":"https://static.time.com/v3/assets/bltea6093859af6183b/blt332f6309811cb4dd/6988907f196cf484a203b56b/facebook-hack-cyber-security-technology-social-media.jpg?branch=production&width=1200&quality=75&auto=webp&crop=1200:675&height=675","width":1200,"height":675,"headline":"Facebook App","caption":"Facebook App","creditText":"Thomas Trutschel—Photothek/Getty Images","representativeOfPage":true}],"publisher":{"@type":"Organization","name":"Time","url":"https://time.com/","logo":{"@type":"ImageObject","url":"https://time.com/images/logo.png","width":528,"height":156},"foundingDate":"March 3, 1923","sameAs":["https://www.facebook.com/time","https://www.instagram.com/time/?hl=en","https://twitter.com/time","https://www.pinterest.com/timemagazine"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"item":{"@id":"/section/business/","name":"Business"}},{"@type":"ListItem","position":2,"item":{"@id":"/tag/time-section-tech/","name":"Tech"}},{"@type":"ListItem","position":3,"item":{"@id":"https://time.com/4306317/facebook-hack-downplayed/","name":"Facebook Says a Recent Hack Attack Isn't a Big Deal"}}]}] ```