Facebook has been worried about data leaks like this since it went public in 2012

(Source: CNBC) “If these third parties or Platform developers fail to adopt or adhere to adequate data security practices or fail to comply with our terms and policies, or in the event of a breach of their networks, our users’ data may be improperly accessed or disclosed.” Facebook was also right about the consequences of such a leak.