I’ve said this before, and I’ll say it again, 2018 has been a rough year when it comes to users’ privacy. It also started with Facebook’s Cambridge Analytica scandal earlier this year, in which personal data of millions of people were harvested without consent.

In a blog post detailing the bug, the social network said that some third-party apps may have had access to “a broader set of photos than usual” for up to 12 days between September 13 to September 25, 2018. Facebook said it may have affected up to 6.8 million users and up to 1,500 apps built by 876 developers.

Facebook said the bug had to do with an error related to Facebook Login and its photos API. The bug allowed developers to access Facebook photos within the app. It is also worth pointing out that this particular bug may have exposed even the photos that people decided to upload to the platform but chose not to post. So I am inclined to believe that those photos were private, which, you know, are meant to be kept that way.

Facebook says it’ll notify the people potentially impacted by this bug via an alert on Facebook. The notification will apparently direct you to a Help Center link where you’ll be able to see if you’ve used any of the apps that were affected by the bug. Facebook Breach Alert Notification