Facebook announced that a bug recently allowed third-party developers to access users’ private photos, and the issue could have affected as many as 6.8 million people.

“Our internal team discovered a photo API bug that may have affected people who used Facebook Login and granted permission to third-party apps to access their photos,” Facebook said in a Friday blog post. “We have fixed the issue but, because of this bug, some third-party apps may have had access to a broader set of photos than usual.”