>The attackers did use the profile retrieval api... but there is no evidence that they got any confidential information I guess name, address, photo, etc. isn't considered confidential by Facebook. I agree actually, anyone using Facebook at any point in history should have no expectation of privacy.