If you have a Facebook profile you should check out your security settings. Check out the article from Computer Weekly on the experiment that Sophos conducted.