A Second Facebook Leak: 48 More Email Addresses Exposed

HEROIC analysts identified a second, separately tracked data breach record tied to Facebook, also dated September 27, 2015. This record covers 48 exposed entries, each consisting of an email address. No passwords were included in this exposure, consistent with the other Facebook record HEROIC has documented from the same date.

Why This Second Facebook Email Batch Still Matters

Whether an email address appears in a batch of 48 or a batch of thousands, the risk to the person behind it is the same. An email tied to a Facebook account confirms an active social media presence, which scammers can use to craft convincing phishing messages that pretend to be friend requests, security alerts, or account verification notices. Even without a password attached, a confirmed and active email address is a useful building block for social engineering.

What Was Exposed

• Email addresses of Facebook users
• No passwords were part of this exposure

Why This Matters

An isolated email address rarely stays that way. Criminals routinely merge small batches like this one with other breach data, pairing an email with a password or other personal detail leaked elsewhere. Once combined, that data enables credential stuffing, targeted phishing, and broader identity theft. If you have ever reused a password with this email address anywhere else, that risk exists whether or not it shows up in this specific record.

How This Database Breach Happened

This incident is classified as a database breach, meaning the records were extracted directly from stored user data rather than collected from individual devices. Breaches like this typically trace back to unpatched software, misconfigured servers, or unauthorized backend access. Once copied, this kind of data can circulate quietly for years, which is why a 2015 exposure can still be relevant today.

Check If You Are Affected

If you have a Facebook account, or have ever used this email address to sign up for one, it is worth checking whether your information appears in this or the related Facebook exposure from the same date. HEROIC's free breach scanner searches more than 400 billion leaked records to give you an instant answer, so you can stay ahead of phishing attempts built around this and other breaches.