The company’s recently appointed Chief Executive Dara Khosrowshahi said the breach was made by two individuals outside the company.
Images of children's bedrooms and views into family living rooms and kitchens can be accessed via a Russian website, watchdog warns.
While big companies such as Facebook rush to secure their sites against a major security flaw, many smaller sites could be at risk.