Facebook says “most people” could have had their profile information harvested by scammers.