What we still don’t know about the Facebook breach