The data appears to have been stolen with malicious browser extensions, and not by exploiting an issue with Facebook’s platform.
https://media.wired.com/photos/5bdc96becacf35399586ee94/master/pass/fb_hack_browser_extension-FINAL.jpg
Hack Brief: Someone Posted Private Facebook Messages From 81,000 Accounts
