This data heist was conducted between January 2018 and September 2019. The programmer started selling it on a black market forum in December 2020. Facebook tracked him down after he used his forum username and contact details for email and job boards. The man has also scraped data from other targets including a major Ukranian bank.
In its complaint, Facebook asked for undefined damages as well as bans preventing the programmer from accessing Facebook or selling its scraped data.
This isn’t the largest such incident. Hackers scraped data for 533 million users through the same feature. However, this illustrates Facebook’s determination to crack down on data scraping — it’s willing to pursue attackers in civil court in hopes of discouraging similar data raiding campaigns.