"Meta alleges surveillance firm collected data on 600,000 users via fake accounts", 12 January 2023

Meta has sued to block a surveillance company from using Facebook and Instagram, alleging the firm, which has partnered with law enforcement, created tens of thousands of fake accounts to collect user data.

A complaint filed... asks a judge to permanently ban Voyager Labs from accessing Meta’s sites and comes after a Guardian investigation revealed the company had partnered with the Los Angeles police department (LAPD) in 2019 and claimed that it could use social media information to predict who may commit a future crime.

Public records obtained by the Brennan Center for Justice, a non-profit organization, and shared with the Guardian in 2021, showed that Voyager’s services enabled police to surveil and investigate people by reconstructing their digital lives and making assumptions about their activity... In one internal record, Voyager suggested that it considered using an Instagram name displaying Arab pride or tweeting about Islam to be signs of potential extremism.

The lawsuit in federal court in California details activities that Meta says it uncovered in July 2022, alleging that Voyager used surveillance software that relied on fake accounts to scrape data from Facebook and Instagram... Voyager created and operated more than 38,000 fake Facebook accounts to collect information from more than 600,000 Facebook users...

The affected users included employees of non-profits, universities, media organizations, healthcare facilities, the US armed forces and local, state and federal government agencies, along with full-time parents, retirees and union members... It is unclear who Voyager’s clients were at that time and what entities may have received the data. But Voyager... designed its software to hide its presence from Meta and sold and licensed for profit the data it obtained, the suit says.

“Our hope is to amplify this message that this is not the right way to police people or the public,” Jessica Romero, Meta’s director of platform enforcement and litigation, said in an interview.

Voyager representatives did not immediately respond to a request for comment on Thursday.

In November 2021, after the internal records were revealed, Facebook sent the LAPD a letter demanding that it cease all social media surveillance use of “dummy” accounts, saying fake accounts were a violation of the company’s policy requiring that people use their real names. The Meta-owned platform also said at the time that using data obtained from the platform for “surveillance, including the processing of platform data about people, groups, or events for law enforcement or national security purposes” was prohibited.

While it is unclear whether the LAPD ultimately used the fake profile feature while working with Voyager, emails showed that officers said it was a “great function” and a “need-to-have” service.

Rachel Levinson-Waldman, managing director of the Brennan Center’s liberty and national security program, said Meta’s lawsuit demonstrated how software tools like Voyager’s can enable mass scraping of data...

She said the case could also have an impact beyond Voyager and should discourage police from pursuing these kinds of technologies: “It sends a pretty clear signal generally to the surveillance-for-hire industry that they could face legal action, and I hope it also sends a signal to police departments and other law enforcement agencies that are considering these tools.”