"We have seen attempts to mine data from profiles," CEO Mark Zuckerberg said in an interview. "If you had the function of searching by e-mail addresses or phone numbers turned on, it can be assumed that someone could have misused it and thus obtained public personal information from your profile," he added. Of course, the attackers managed to get only what their owners had allowed on their profiles. So, if you have properly secured your profile and only some basic information is displayed to strangers, you don't have to worry.
It is also interesting that this search option was enabled by Facebook really very long and no one cares about it nestHowever, the recent scandal is likely due to attackers trying to "take away" as much data as possible at the last minute before the Facebook will swing towards introducing stricter measures.
Source: iDnes