ZDNet reports that a bug in Facebook's "report abuse" tool can let people see photos in your account that you thought you had made private.
For example! Here someone has pulled out a bunch of Mark Zuckerberg’s "private" photos. Nothing scandalous, just the life of a boy-zillionaire. Surprisingly ordinary, really. Friends, food, Halloween candy, the president, dead chickens.
I'm sure Facebook will fix this, but remember: Don't put anything on the Internet you don't want everybody to see.