A Facebook bug has exposed nearly seven million users’ private photos without their permission.

Facebook said the bug allowed third-party app developers access to photos people may not have shared publicly.

Users’ photos were exposed over a 12-day period in September. Facebook said it will notify people potentially impacted by the bug.

Earlier this year, Cambridge Analytica revealed it had used Facebook several years ago to gather data on tens of millions of Americans.

The body that oversees Facebook’s compliance with European regulations said it has launched a “statutory inquiry” into Facebook as a result of multiple breaches involving the company.