They should not require you to log in to their site to look up whether they have victimized you. I used to have a FB account but threw the random password away. Was I affected? No way to know?
Yet another reason they should email affected users, guess they care more about not publicizing bad information than taking responsibility.
As one of those people, this summer I encountered a spotify issue where my spotify would randomly start playing Cannabis Club ATL. Others had the same issue. Perhaps unrelated, too difficult to tell, especially if FB doesn't consider me an active user.
If they still store some user details (which it seems they do) and then this leaks - absolutely.
What about those who have never been users yet Facebook stores plenty of information about?