The attackers stole Facebook access tokens, which keep you logged in so you don't have to enter your password every time you visit. In total, around 90 million people will have to log back in the next time they try to access the platform.
Ahead of World Password Day, a recent PCMag survey of 1,000 U.S. consumers found that many people are still terrible at creating and securing their passwords.