Facebook CEO Mark Zuckerberg revealed today that all 2.2 billion users of the social network should assume their data has been compromised by third parties.
The source of the vulnerability is Facebook’s search feature, which allows anyone to look up users by their email address or phone number. 
Users will have to allow this, via an option that says “show names in searches.” The security settings for this option are enabled by default.
In a blog by CTO Mike Schroepfer, Facebook hints at the scale of the problem:
However, malicious third parties have exploited these functions to link public profile information by submitting phone numbers or email addresses that are already available through search and account recovery. Given the scale and the complex activity we have seen, we believe that the information of most profiles has been leaked in this way.
Zuckerberg confirmed how exposed Facebook had left its users, in questions that journalists asked him according to TNW:
I would assume that if you had this setting enabled, someone could access your public information in some way.
Mr. Mark Zuckerberg also said that he feels responsible for his company's mistakes but when asked if he still considered himself the best person to run the company, he said: “Yes.”
