Huge Facebook leak that contains information about 500 million people came from abuse of contacts tool, company says