Facebook disclosed a new security incident, the social network giant admitted that app developers may have accessed its group users data. The company said that before April 2018, group admins could authorize an app for a group, this implies that its developers grant access to information in the group. Facebook pointed out that an app to access additional information such as name and profile picture in connection with group activity, group members had to opt-in. In July, Facebook agreed to pay a $5 billion fine as a settlement with the Federal Trade Commission over the Cambridge Analytica case.”]
Source: https://securityaffairs.co/wordpress/93492/social-networks/facebook-group-members-incident.html