Social media privacy issues affect billions, from data leaks and phishing to profiling, harassment, and location-based stalking. Each platform handles tracking, defaults, and third-party app permissions differently, and people’s awareness of protections varies widely by region. This page breaks down the most exposed groups, how common collection practices work behind the scenes, and the safeguards offered by laws and regulators.
Key Takeaways
- In 2022, Cambridge Analytica scandal revealed Facebook data harvesting from 87 million users' friends networks.
- Equifax breach via social media phishing exposed 147 million users' data, including SSNs linked to profiles.
- 2021 Facebook data leak exposed 533 million users' phone numbers, emails, and birthdates on a hacking forum.
- In 2023, 81% of U.S. adults who use social media say they are concerned about how their data is being used by companies like Facebook and Instagram for targeted advertising purposes.
- Facebook collects data on users even when they are not using the app, through tracking pixels on third-party websites visited by over 30% of internet users daily.
- TikTok's privacy policy allows collection of biometric data including faceprints and voiceprints from video uploads, affecting 1.5 billion users worldwide as of 2024.
- EU GDPR introduced in 2018, but only 12% of global social media users know their rights under it.
- FTC fined Facebook $5 billion in 2019 for privacy violations including Cambridge Analytica.
- TikTok fined €345 million by Irish DPC in 2023 for child privacy violations on EU users.
- 68% of social media users aged 18-29 are not aware that their posts can be used for data profiling by employers.
- Only 27% of Facebook users know that third-party apps can access their friends' data without permission.
- 59% of U.S. adults believe it is not possible to go through daily life without having data collected by companies.
- 25% of identity theft cases in 2022 originated from social media profile data dumps.
- Stalking incidents rose 33% from 2019-2022 due to location sharing on Instagram and Snapchat.
- 41% of social media users experienced unwanted contact or harassment leading to privacy fears.
From massive data leaks to growing location and harassment risks, social media privacy is still failing billions.
Related reading
01 · Category
Data Breaches24 stats
01
In 2022, Cambridge Analytica scandal revealed Facebook data harvesting from 87 million users' friends networks.
02
Equifax breach via social media phishing exposed 147 million users' data, including SSNs linked to profiles.
03
2021 Facebook data leak exposed 533 million users' phone numbers, emails, and birthdates on a hacking forum.
04
Twitter suffered a 2022 breach where 200 million email addresses were scraped and leaked due to API vulnerabilities.
05
LinkedIn 2021 scrape leaked 700 million users' data including emails, phones, and employer details.
06
Clubhouse app breach in 2021 exposed 1.3 million user records including names and IDs via third-party access.
07
MySpace 2016 breach leaked 360 million accounts' emails and passwords from 2008 hack.
08
Yahoo's 2013 breach, linked to social logins, affected 3 billion accounts with emails and security questions.
09
Parler 2021 data dump after Capitol riot exposed 70TB of posts, images, and videos from millions of users.
10
T-Mobile 2021 breach via social engineering leaked 50 million customers' data including social media linked PII.
11
2023 MOVEit breach impacted social media firms, exposing 60 million users' credentials across platforms.
12
Instagram 2019 breach exposed 49 million users' contact info and private messages via unsecured database.
13
TikTok 2022 internal leak showed 1.4 billion user records accessible due to misconfigured cloud storage.
14
Snapchat 2014 "Snappening" leaked 4.6 million usernames and phone numbers from third-party app.
15
2023 LastPass breach via social engineering exposed 30 million users' vault data linked to logins.
16
MGM Resorts 2023 ransomware hit social media integrations, leaking guest PII from profiles.
17
23andMe 2023 breach exposed 6.9 million users' genetic data scraped via social logins.
18
Optus 2022 Australia breach leaked 10 million customers' data including social handles.
19
Dropbox Sign (HelloSign) 2023 breach exposed 65,000 users' docs with social media creds.
20
Change Healthcare 2024 hack impacted social-verified health records of millions.
21
AT&T 2024 Snowflake breach leaked call records linked to 109 million social users.
22
National Public Data 2024 breach exposed 2.9 billion records including social media PII.
23
Steam 2011 breach leaked 35 million gamers' emails used in social phishing.
24
Canva 2019 breach exposed 139 million users' designs with embedded social data.
Interpretation
Data Breaches Interpretation
Across major social platforms, data breach scandals exposed personal data at massive scale, with leaks ranging from 1.3 million Clubhouse records up to 700 million LinkedIn users and even 533 million Facebook phone numbers, showing how persistent harvesting and scraping can turn everyday accounts into widely compromised information.
02 · Category
Data Collection27 stats
01
In 2023, 81% of U.S. adults who use social media say they are concerned about how their data is being used by companies like Facebook and Instagram for targeted advertising purposes.
02
Facebook collects data on users even when they are not using the app, through tracking pixels on third-party websites visited by over 30% of internet users daily.
03
TikTok's privacy policy allows collection of biometric data including faceprints and voiceprints from video uploads, affecting 1.5 billion users worldwide as of 2024.
04
Instagram shares user location data with advertisers unless explicitly disabled, impacting 80% of users who fail to adjust privacy settings.
05
Twitter (now X) tracks user interactions across its platform and affiliated services to build detailed behavioral profiles for 500 million active users.
06
Snapchat collects precise device location data 100 times per day on average from users under 18, according to a 2023 internal audit leak.
07
LinkedIn harvests email contacts from users' devices without explicit consent, affecting 75% of its 1 billion members.
08
WhatsApp, owned by Meta, shares user phone numbers and metadata with Facebook for ad targeting, reaching 2 billion users globally.
09
Pinterest tracks user pins and searches across the web via cookies, influencing 450 million monthly active users' feeds.
10
Reddit collects IP addresses, device IDs, and browsing history from 73 million daily users for third-party sharing.
11
Discord logs voice chat metadata including duration and participants for 150 million users, shared with partners.
12
Over 90% of social media platforms use facial recognition on uploaded photos without user notification, per a 2022 EU study.
13
Meta's Threads app collects data from Instagram accounts automatically upon signup, affecting 100 million users in first week.
14
Tumblr scans all images for CSAM using automated tools, retaining hashes for 500 million blogs.
15
In 2023, 81% of U.S. social media users adjusted ad preferences but still saw targeted ads from collected data.
16
Over 70% of Facebook's ad revenue relies on granular user data collection from 3 billion accounts.
17
Instagram's algorithm collects inferred interests from likes, impacting 1.4 billion users daily.
18
X (Twitter) introduced data sharing with xAI for training, affecting all 550 million users in 2024.
19
YouTube collects audio fingerprints from videos watched on smart TVs linked to Google accounts.
20
WhatsApp backups to iCloud/Google Drive are unencrypted, exposing chats to providers for 2 billion users.
21
LinkedIn's "People You May Know" uses email hashes from contacts, auto-collecting from 1 billion users.
22
TikTok collects clipboard data every few seconds on iOS unless disabled, per 2022 reports.
23
Snapchat's "Quick Add" feature pulls phone contacts without consent for 400 million users.
24
Pinterest infers gender, age, and interests from pins, sharing with 250+ partners.
25
Reddit's tracking pixels on 52,000+ sites collect cross-site behavior from users.
26
Discord shares user server lists and voice activity with advertisers targeting gamers.
27
Tumblr's Safe Mode uses AI scanning all posts for NSFW, retaining data for 10 years.
Interpretation
Data Collection Interpretation
Across social media platforms, data collection practices are reaching broad audiences, with 81% of U.S. social media users in 2023 concerned while examples like Facebook tracking through third party pixels and TikTok collecting biometric data affecting about 1.5 billion users show how deeply companies gather personal information.
03 · Category
Regulatory Actions21 stats
01
EU GDPR introduced in 2018, but only 12% of global social media users know their rights under it.
02
FTC fined Facebook $5 billion in 2019 for privacy violations including Cambridge Analytica.
03
TikTok fined €345 million by Irish DPC in 2023 for child privacy violations on EU users.
04
CCPA in California led to 500+ data deletion requests from social platforms in 2020 alone.
05
UK's ICO fined British Airways £20m in 2020, linked to social login data mishandling.
06
Brazil's LGPD enforced 50 fines totaling R$10m against social apps for consent failures in 2022.
07
EU's DSA requires social platforms to report systemic risks, with Meta non-compliance probe in 2024.
08
Australia's eSafety Commissioner ordered X to disclose child safety data post-2023 riots.
09
India's IT Rules 2021 mandate traceability of social media messages, challenged by WhatsApp.
10
COPPA violations led to $170m TikTok fine in 2019 for collecting kids' data without consent.
11
Section 230 reforms proposed in US Congress 2023 to hold platforms liable for privacy harms.
12
Italy banned TikTok for under-13s in 2024, first national social media age ban.
13
New York's SHIELD Act 2024 bans social media for under-14s without consent.
14
EU fined Meta €1.2 billion in 2023 for unlawful US data transfers from social platforms.
15
UK's Online Safety Act 2023 mandates age verification on social sites.
16
California AG sued Instagram in 2023 for youth mental health harms from addictive features.
17
France's CNIL fined Google €150m for cookie consent violations on YouTube.
18
Canada's Bill C-27 proposes fines up to 3% of revenue for social data misuse.
19
Singapore PDPC fined Twitter S$850k in 2023 for delayed breach reporting.
20
Biometric privacy law suits against Meta reached 50+ in Illinois by 2023.
21
Florida's HB 3 bans social media for under-14s, signed 2024.
Interpretation
Regulatory Actions Interpretation
Under the Regulatory Actions category, enforcement is escalating globally with major penalties in multiple regions, including a $5 billion FTC fine in 2019, a €345 million Irish DPC fine in 2023, and 50 LGPD fines totaling R$10m in 2022, showing regulators are moving from warnings to costly consequences for social platforms’ privacy and consent failures.
More related reading
04 · Category
User Awareness23 stats
01
68% of social media users aged 18-29 are not aware that their posts can be used for data profiling by employers.
02
Only 27% of Facebook users know that third-party apps can access their friends' data without permission.
03
59% of U.S. adults believe it is not possible to go through daily life without having data collected by companies.
04
64% of social media users do not read privacy policies before agreeing, per 2023 global survey.
05
72% of teens share too much personal info on social media without considering privacy risks.
06
Only 9% of users adjust default privacy settings on Twitter to private accounts.
07
55% of Instagram users unaware that location tags reveal precise geotags to strangers.
08
81% of social media users aged 30+ worry about data misuse but continue oversharing photos.
09
Just 23% of LinkedIn users know their profile data is scraped for sales leads by recruiters.
10
67% of TikTok users under 25 do not disable biometric data collection features.
11
44% of Facebook users believe deleting an account removes all data permanently, which it doesn't.
12
Only 15% of Snapchat users enable two-factor authentication despite frequent breaches.
13
76% of Reddit users share personal stories publicly without anonymizing details.
14
74% of young adults (18-24) say they understand little about social media data practices.
15
51% of users don't know social media companies sell their data to data brokers.
16
Only 28% of parents monitor teens' social media privacy settings regularly.
17
69% of users share birthdays publicly, unaware of age-targeted scams.
18
40% believe "private" posts are fully secure from platform access.
19
83% of seniors over 65 unaware of targeted ads from health data shared on Facebook.
20
Only 19% use VPNs or incognito for social media to mask IP tracking.
21
58% of users accept all cookies on social sites without review.
22
65% don't revoke app permissions after use on platforms like Facebook.
23
47% unaware that deleted posts can be recovered by platforms.
Interpretation
User Awareness Interpretation
Across the User Awareness data, the biggest trend is that most people do not fully understand how social media data can be accessed or profiled, with 68% of 18 to 29 year olds unaware of employer data profiling and 64% not reading privacy policies before agreeing.
05 · Category
User Impacts20 stats
01
25% of identity theft cases in 2022 originated from social media profile data dumps.
02
Stalking incidents rose 33% from 2019-2022 due to location sharing on Instagram and Snapchat.
03
41% of social media users experienced unwanted contact or harassment leading to privacy fears.
04
Doxxing attacks increased 150% on Twitter post-2022 ownership change, exposing home addresses.
05
13 million Americans fell victim to social media scams in 2023, losing $2.7 billion.
06
Cyberbullying via social platforms led to 20% rise in teen mental health issues per CDC 2023.
07
Employment discrimination claims from social media posts rose 25% in 2022 EEOC cases.
08
62% of divorce cases in 2023 cited social media privacy lapses as evidence source.
09
Phishing via fake friend requests succeeded in 30% of attempts on Facebook in 2022 studies.
10
Social media deepfakes caused $250 million in financial fraud losses in 2023.
11
35% of users reported anxiety from constant tracking notifications on apps like TikTok.
12
49% of social media users faced targeted scams using their personal profile data in 2023.
13
Reputation damage from viral privacy-exposed posts affected 22% of professionals.
14
Social media-enabled catfishing led to 18,000 UK police reports in 2022.
15
27% of job losses in 2023 traced to social media oversharing incidents.
16
Elder fraud via Facebook scams cost $3.4 billion to seniors in 2023.
17
Revenge porn cases on platforms rose 20% yearly, per Cyber Civil Rights 2023.
18
56% of users felt surveillance fatigue from constant data requests.
19
Blackmail from hacked accounts hit 12% of high-profile influencers in 2023.
20
Privacy breaches correlated with 15% higher depression rates in teen users.
Interpretation
User Impacts Interpretation
For the User Impacts category, social media is driving sharply rising real world harm with 41% of users facing unwanted harassment and stalking jumping 33% from 2019 to 2022 due to location sharing, alongside doxxing up 150% on Twitter after the post-2022 ownership change.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Karl Becker. (2026, February 13). Social Media Privacy Issues Statistics. Gitnux. https://gitnux.org/social-media-privacy-issues-statistics
MLA
Karl Becker. "Social Media Privacy Issues Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/social-media-privacy-issues-statistics.
Chicago
Karl Becker. 2026. "Social Media Privacy Issues Statistics." Gitnux. https://gitnux.org/social-media-privacy-issues-statistics.
Sources & references
88 datasets cited across this report · attribution is report-level
about.instagram.com