I'm going to bet that data isn't just from people who gave access to their address book, it's probably from advertisers as well.

Advertisers can upload a list of mobile phones, email address and names to Facebook to ask them not to target these people (for example, existing customers).