Over 267 million Facebook users had their names, phone numbers, and profiles exposed thanks to a public database, researcher says