I don't work at Facebook but my understanding is passwords were not stored in a database in plaintext, but there was verbose logging of web requests that were n

I don't work at Facebook but my understanding is passwords were not stored in a database in plaintext, but there was verbose logging of web requests that were not sanitized. Sanitizing logs is definitely common sense and a basic security practice, but it can be difficult to be sure you are doing it adequately without good tooling to monitor it.