<p>The security researchers who found Facebook's shadow profiles vulnerability have compared their numbers to what Facebook told its users in emails, and the numbers don't match.</p><p>They say Facebook told users the data exposure is much less than what the researchers found, and the researchers also say Facebook is hoarding non-user contact information seen when it was also shared and exposed in the leak.</p><p>Friday Facebook announced the fix of a bug it said inadvertently exposed the private information of over six million users when Facebook's previously unknown shadow profiles accidentally merged with user accounts in data history record requests.</p><p>Since at least 2012, Facebook users who used the Download Your Information (DYI) tool to get their data history record also got an address book with contacts users had never provided to Facebook.</p><p><a href="http://www.zdnet.com/firm-facebook-bug-worse-than-reported-non-users-also-affected-7000017318/">Keep reading...</a></p><p>Read also:</p><p><a href="http://www.huffingtonpost.com/2013/06/25/facebook-user-data-bug_n_3492889.html">How Facebook Explains User Data Bug That Leaked 6 Million People&#039;s Information</a> (Huffington Post)</p><p><a href="http://www.forbes.com/sites/kashmirhill/2013/06/25/facebook-says-your-shadow-contact-info-isnt-available-to-advertisers/">Facebook Says Your &#039; Shadow &#039; Contact Info Isn &#039; t Available To Advertisers</a> (Forbes)</p><p><a href="http://news.yahoo.com/other-peoples-facebook-data-profiles-160639500.html">How Other People&#039;s Facebook Data Profiles You</a> (Yahoo! News)</p><p>Explore: <a href="http://news.google.com/news/more?ncl=dablO6EeaYgECSMipDTrxkqWZAZBM&ned=us">108 additional articles.</a></p>