private facebook photos are not private

From Ars Technica:

Nathalie Blanchard took leave from her job at IBM a year and a half ago after being diagnosed with "major depression," according to CBC News. At that time, Manulife began paying out monthly sick leave checks as part of her benefit package—until Blanchard posted photos to her private Facebook profile depicting her having fun at her own birthday party.

How did the insurance company obtain the photos? It's hard to say. But the takeaway here is that Facebook photos — even those published privately — are open to the public.