tl;dr, there isn’t a another leak, but rather a researcher found a vulnerability which has been laying there for a while and FB didn’t care to fix even though he told them about it, so someone probably used the vulnerability but if so it hasn’t seen the light yet.