Attackers exploited 3 bugs and Facebook’s once-vaunted social graph to steal 29 million users’ data