> ”Breach" specifically implies that defenses were penetrated
It’s time to update the definition. “Breach” means you lost my shit. I thought I gave it you in confidence and then you lost it. Facebook arguing “this isn’t technically a breach” comes across as their yet again talking down to users to slip problems under the rug.
Sure, but we still need some term to disambiguate between "a company didn't protect my data against intruders" and "a company sold my data, then didn't like what the buyer did with it".
This isn't like the Equifax breach. It's not a result of Facebook's security practices. It's a result of Facebook's entire business model.
This is far worse than if the data were taken from them unwillingly, because it vastly increases the number of entities with unfettered access to it.