A material part is supported, but the published wording goes beyond the record.
Facebook said on 17 March 2018 that the claim that the Cambridge Analytica matter was a data breach was completely false.
The claim that this is a data breach is completely false.
- About
- Meta Platforms, Inc.
- Claim made by
- Meta Platforms, company statement
- Published
- 17 March 2018
- Evidence score
- 76 How it was scored
- Last reviewed
- 25 October 2026
Why this label
Facebook's account was that data reached Cambridge Analytica through an app about 270,000 people downloaded, not through an intrusion into its systemsS1. No regulator record read here describes a hack. But regulators treated the episode as a failure to protect user data. The FTC said Facebook violated its 2012 order by deceiving users about control of their informationS2. The SEC said Facebook had found actual misuse by a developer in 2015 and still described the risk as hypotheticalS4. The ICO penalty was settled without admissionS5. The narrow technical point stands. The denial understated the misuse that the regulators later described.
Current procedural position
Company statement of 17 March 2018S1. FTC order entered by the court on 23 April 2020S3. SEC settlement announced on 24 July 2019 without admitting or denyingS4.
Record supporting the assessment
Approximately 270,000 people downloaded the app.
Conflicting or limiting record
violated a 2012 FTC order by deceiving users about their ability to control the privacy of their personal information
may be improperly accessed, used or disclosed
Evidence score: 76 of 100
The score grades how well the record establishes this assessment. It is not a score of Meta Platforms, Inc.. Score = source authority + directness + corroboration + procedural accuracy + currency + reproducibility.
| Component | Points | Max | Reason |
|---|---|---|---|
| Source authorityIs the source competent to establish the proposition? | 24 | 30 | FTC and SEC releases are competent, but none rules on the word breach. |
| DirectnessDoes the source state the proposition or only discuss adjacent facts? | 12 | 20 | The records address misuse and disclosure rather than the breach label. |
| CorroborationDo independent records support the same material point? | 12 | 15 | FTC, SEC and ICO records agree that user data was misused. |
| Procedural accuracyDoes the record settle the procedural state the claim describes? | 10 | 15 | The FTC order is court-entered, but the SEC and ICO matters settled without admission. |
| CurrencyHas the record been checked against later developments? | 9 | 10 | Checked against the 2026 Delaware approval. |
| ReproducibilityCan a reader locate the passage and repeat the assessment? | 9 | 10 | All pages are public. |
| Total | 76 | 100 |
Timeline
Related cases
- United States v. Facebook, Inc.US District Court for the District of Columbia. Civil. Not published.Stage: Stipulated order entered on 23 April 2020.
- Judge Timothy J. Kelly enters the orderS3
- Securities and Exchange Commission v. Facebook, Inc.US Securities and Exchange Commission. Civil. Not published.Stage: Settled without admitting or denying, with consent to the entry of a final judgmentS4.
- Settlement with US$100 million penalty and injunction announcedS4
- Information Commissioner v. Facebook Inc. and Facebook Ireland LimitedUK Information Commissioner's Office and First-tier Tribunal. Regulatory. Not published.Stage: Appeals withdrawn by both sides under an agreement of 30 October 2019.
Revision history
- Assessment first published with label Partly supported.
Have a record that changes this assessment? See corrections and responses.
Sources
- S1Tier B Suspending Cambridge Analytica and SCL Group From FacebookFacebook (Meta Newsroom). Company statement. 16 March 2018, updated 17 March 2018.Facebook's account and its breach denial. It is the company's position, not a finding.Link working, checked 25 October 2026
- S2Tier A FTC Imposes $5 Billion Penalty and Sweeping New Privacy Restrictions on FacebookUS Federal Trade Commission. Regulator press release. 24 July 2019.Supports the penalty and the alleged order violation. It contains no admission.
- S4Tier A Facebook to Pay $100 Million for Misleading Investors About the Risks It Faced From Misuse of User DataUS Securities and Exchange Commission. Regulator press release. 24 July 2019.Supports the SEC charges and settlement. Facebook did not admit or deny.
- S3Tier A FTC Gives Final Approval to Modify FTC's 2012 Privacy Order with Facebook with Provisions from 2019 SettlementUS Federal Trade Commission. Regulator press release. 28 April 2020.Supports the court entry date. It does not state a case number.
- S5Tier D ICO and Facebook reach agreement regarding misuse of data in political campaignsSociety for Computers and Law. Press report. 30 October 2019.Professional body report quoting the ICO statement on the agreement. The ICO page itself was not read.
- S9Tier C Facebook agrees to pay UK data watchdog’s Cambridge Analytica fine but settles without admitting liabilityTechCrunch. Press report. 30 October 2019.Report by Natasha Lomas confirming the 30 October 2019 agreement, the full payment, the absence of an admission and the dropped appeals. The ICO page itself was not read.Link working, checked 25 October 2026
Other claims about Meta Platforms, Inc.
- Supported91The FTC said on 24 July 2019 that Facebook would pay a US$5 billion penalty for violating its 2012 FTC privacy order.Regulator statement, 24 July 20192 records citedDisclosure
- Partly supported80The SEC said in July 2019 that Facebook misled investors by presenting the risk of misuse of user data as hypothetical after it had learned of actual misuse.Regulator statement, 24 July 20193 records citedDisclosure
- Supported75Outlook Business reported in November 2025 that current and former Meta directors agreed to pay US$190 million to settle the Cambridge Analytica shareholder lawsuit in Delaware.Press report, 23 November 20254 records citedDisclosure