What do you mean by "taken"? I guess the Facebook application just used the privileges the users provided to it to compile this list.

I don't think the accounts were 'taken', I thought he just had some of their data ...

dev make and app, user uses app by granting acces to basic infos, which every apps asks for. dev save details of each user in spreadsheet and sells it.