Google is expediting the shutter of the consumer version of Google+ amid the fresh vulnerabilities discovered.
Back in October 2018, Google had announced the closure of Google+ consumer along with its API due to a data breach affecting 500,000 users worldwide starting in August 2019.
However, another significant bug discovered in past November, impacting approximately 52.5 million users has forced this earlier closer.
Google says the recent vulnerability was caused by a software update that affected Google+ API. It was found and fixed during a standard test within a week of it being introduced.
“No third party compromised our systems, and we have no evidence that the app developers that inadvertently had this access for six days were aware of it or misused it in any way,” stated Google.
As a result, all Google+ APIs will be shutting down within the next 90 days.
In addition, Google has also decided to expedite the sunsetting of consumer Google+ four months earlier than originally announced.
The sunsetting of Google+ is shifted from August 2019 to April 2019.
Google notes that for six days neither any third-party compromised its system, nor developers were aware of it.
However, the investigation into the potential impact still continues says Google adding, more details will be shared in the next few days.
Here are some details from the current investigation:
- Google+ API bug impacted 52.5 million users.
- Due to bug third-party apps gain access to users’ profile data that was set to not-public.
- The bug did not give access to developers of the data typically used for fraud or identity theft. This includes financial data, national identification numbers, passwords, or other similar data.
Meanwhile, the company has started notifying its consumer and enterprise users who were impacted.
Google says a list of impacted domains and their users is already being sent to system administrators.
Users of consumer Google+, who wish to preserve their data, can expect ways to securely download their data in the coming months.