Up to six million Facebook users' personal e-mail addresses and phone numbers have been exposed, and not through a hack.