> it contains plaintext (i.e. unprotected) passwords for 22,000 users

and

> The passwords are presumably for the “At the Pool” app rather than for the user’s Facebook account, but would put users at risk who have reused the same password across accounts.