While the headline isn't exactly wrong, it is highly misleading. "Porembski was alleged to have obtained the login details of at least 116,000 Facebook users,

While the headline isn't exactly wrong, it is highly misleading. "Porembski was alleged to have obtained the login details of at least 116,000 Facebook users, and sent more than 7.2 million spam messages to victims' online friends." "Some of the spam messages directed users to phishing websites that stole usernames and passwords" I assumed from the headline that the defendant made his/her own accounts and spammed people. What he did is much worse.