The data was obtained through a process called data scraping rather than hacking. Data scraping is a process of extracting publicly available data from the web and organizing it into lists and databases. It is then sold to scammers, unethical marketers, state agents, organized crime syndicates, and other shady individuals and groups.
Why is this dangerous?
Phone numbers, location, and users’ full names allow criminals to select their targets more accurately. The scraped data can be used to coordinate phishing attacks, social engineering attacks, spam attacks, or offline attacks.
Facebook users are encouraged to delete their accounts or set them to private to prevent further data scraping. Users are also encouraged not to enter random quizzes, surveys, or games from unknown and unverified publishers.