Source
Mark Zuckerberg said yesterday in a call that any user who had email or phone number search enabled should "assume" their profile has been scraped.
"We've seen some scraping"
Mark Zuckerberg - Facebook Chief Asshole
Mark goes on to say, "I would assume if you had that setting turned on that someone at some point has access to your public information in some way"
There never was a question Facebook will dramatically decrease your privacy on the Internet and with your own government, but it is becoming clear it is a lot worse than previous expected. It is estimated over 87 million Facebooks have had their data leaked to Cambridge Analytica, up from previous estimate of around 50 million.
"Until today, people could enter another person's phone number or email address into Facebook search to help find them. This has been especially useful for finding your friends in languages which take more effort to type out a full name, or where many people have the same name. In Bangladesh, for example, this feature makes up 7% of all searches. However, malicious actors have also abused these features to scrape public profile information by submitting phone numbers or email addresses they already have through search and account recovery. Given the scale and sophistication of the activity we've seen, we believe most people on Facebook could have had their public profile scraped in this way. So we have now disabled this feature. We're also making changes to account recovery to reduce the risk of scraping as well."
Mike Schroepfer - Facebook CTO
If this makes you want to delete your Facebook account, you can find information here.