TikTok Data Breach: Should You Be Worried?
TikTok data breach concerns persist primarily due to the platform’s massive popularity and steady user growth. As the app surpasses the two billion mark in registered users, the protection and security of user data become even more crucial.
Here’s everything you need to know about the platform’s history of data safety controversies!
Has TikTok Ever Had a Data Breach?
All social media platforms have had their share of data breaches and issues regarding collecting and using personal information. But privacy and security concerns continue to hound TikTok as parent company ByteDance remains firm on its refusal to sell the platform.
As the potential ban of Tiktok in the U.S. nears, let’s review the video-sharing app’s history of data breaches.
TikTok’s First Privacy Violation
Before TikTok’s merger with Musical.ly in August 2018, the latter had violated child privacy laws.
According to the U.S. Federal Trade Commission (FTC), it displayed the personal information of children under 13. The platform also allegedly collected data without parental consent.
The app also defaulted to making all profiles public. The profile pics and bios of private profiles were still visible to all users. Setting a profile to private didn’t restrict Direct Messages (DMs).
After the merger, the FTC enforced the penalty for the violation years later, in February 2019. This meant that TikTok had to shoulder the responsibility, and the social media app paid the $5.7M fine.
TikTok Faces a Class Action Lawsuit
In August 2020, a class action lawsuit in the U.S. accused TikTok of gathering and sharing facial recognition data without user consent.
TikTok continues to deny the allegations to this day, but the company agreed to settle with impacted users. The platform paid $92M as a settlement to avoid litigation.
In April 2021, a similar claim was filed on behalf of children in the UK and EU.
TikTok’s First Data Breach
Again, in August 2020, security company Comparitech discovered an unsecured and unencrypted database containing profile data from 235M TikTok, Instagram, and YouTube users. The database required no password and was completely accessible to anyone.
Profile data included users’ names, ages, genders, and profile image records. Some of the data also included email addresses and phone numbers. The data leak was traced back to Deep Social, a company that scraped social media profile account information.
Backdoor Access to User Data
In June 2022, Buzzfeed News revealed that TikTok employees in China accessed American user data. The news outfit reviewed internal documents and found indications of “backdoor access to user data.”
TikTok Faces Another Controversy Involving Unauthorized Data Access
In December 2022, TikTok admitted that four ByteDance employees spied on reporters covering the company. The employees were based in the company’s U.S. and China offices. ByteDance fired said employees following the incident.
TikTok Faces Multiple Data Violations in the UK
In April 2023, the UK’s Information Commissioner’s Office fined TikTok for collecting children’s data without parental consent. The British General Data Protection Regulation (GDPR) said the platform failed to inform users how it used and shared their data.
TikTok’s Most Recent Breach
In June 2024, hackers recently used malicious links sent through Direct Messages (DMs) to hack notable accounts on TikTok, including CNN.
According to the platform, it has since taken measures to stop the attack and prevent similar incidents from happening again.
TikTok Data Breach: Frequently Asked Questions
How can I protect my data and minimize my data breach TikTok risks? Is my data safe with TikTok? Let’s answer a few more FAQ to help ease your worries.
TikTok only collects basic user data for optimal user experience (UX). These include the user’s name, age, specified interests during sign-up, and interactions on the app. TikTok may access your phone and phone contacts only if you give permission.
The platform may also request access to your device’s camera, microphone, and location to perform certain app functions. TikTok’s data collection processes and practices are similar to those of other social media channels.
You should take the following measures to safeguard your data on TikTok:
– Change your TikTok password immediately.
– You should also change the passwords of all other accounts associated with your TikTok account, e.g., email, Instagram, and Facebook. This is especially important if you use the same passwords for multiple online accounts.
– Enable Two-Factor Authentication (2FA) on TikTok for an additional layer of security.
– Check your app’s security alerts and manage device access to your account. Go to your Profile>Menu>Settings and privacy>Security & permissions.
Protect Your TikTok Account and Community
Having an online presence comes with all sorts of risks. On social media, users are vulnerable to trolls, scammers, hackers, and bots, among others. Each platform offers various solutions to help users protect their information.
Government regulations also ensure these platforms act responsibly when accessing and handling user data.
On TikTok, users have different options to help them safeguard their privacy. Regular users and creators who use a personal account can make their accounts private. Those who opt for a public account can explore options to limit comments and other types of access to posts.
If you’re building a community on the video-sharing app, your community’s safety is also your responsibility. Be aware of potential TikTok data breach risks and similar other security concerns. Take all the necessary precautions to protect your account and community from bots, scammers, abusive users, etc.
A sure way to safeguard your community is to invite only the most suitable users to join your tribe. Sign up with a High Social plan and leverage its advanced, proprietary AI targeting algorithm. Always connect with genuinely interested viewers to grow your follower base more efficiently and safely.
Start growing your TikTok today!
TikTok 101