... But you previously gave me the ability to manage your accounts, then I gave it to the 3rd party that then drained your account. Still not a breach of the b

... But you previously gave me the ability to manage your accounts, then I gave it to the 3rd party that then drained your account. Still not a breach of the bank, nor a breach of facebook. The app didn't have any "extra" access or anything other than what the person who installed it would have. The app used the information that the person gave it, and that included information on friends that the person had access to. If you were impacted, blame yourself, your friends that you gave information to who gave it to a 3rd party, and/or the company that made the app. All facebook did was make the metaphorical parking lot that you got robbed in. While I agree that there is more they can do here to prevent this kind of thing (like specific and explicit controls on what data an app wants/needs at install time), acting like this is a breach of their information is wrong.