Comment by karmelapple

Was this a security breach in the sense that the company with the data got “hacked”? No.

Was this a breach in trust to Facebook users? I think undoubtedly yes.

And was there a breach of a the Terms of Service by companies taking all this data and using it for non-academic purposes? Yes there was.

So the type of breach seems to be a worthwhile distinction to make.