for failing to prevent cyberattackers from exploiting a vulnerability in Facebook's code. The exploit allowed them to use the site's "View As" feature to see people's private profile information.