It was hardly an exploit when the data was publicly available... It was a lack of privacy control by Facebook which the public recognition forced them to fix.