Private messages? There is ZERO excuse for such leak. It is either utterly incompetence or intentionally malicious. Facebook needs to be hold accountable, period.
By leak you mean people giving consent when presented with the list of permissions the app / quiz requested?
I think the outrageous part is that app developers could get data of their users' friends - those are the people that never used the app or agreed to its permissions.
