https://www.theregister.co.uk/2018/12/14/facebook_leaking_private_photos/

Facebook on Friday apologized for a bug that may have exposed exposed private photos to third-party apps for the 12 day period from September 13 to September 25, 2018.

"We're sorry this happened," said Tomer Bar, Facebook engineering director, in a blog post intended for developers, noting that as many as 6.8 million users and 1,500 apps from by 876 developers may be affected.