Infosec researchers that broadly claim they’ve hacked Facebook when they’ve only exposed app data. A clear example of infosec hype:
“Millions (LOTS OF MILLIONS) of accounts, email addresses and passwords up for grabs by anyone.”
“upload phpshells, redirects, INFECT PAGES WITH TROJAN DROPPERS, even deface the whole website.”
“How could the columns of this table be named other than email and password ? You guessed it, they are named like that.”