Exposed Passwords List might be from Facebook, not phishing Hotmail itself

I have got 10028 hotmail username and password lists startswith "a","b"

I have tried few hacked accounts to login to facebook, instead of hotmail itself, and

I found that its successful logged in, and 

facebook already knows their site phished and suspended those accounts already. (see the screenshot, there is logout button) 

its mean they,facebook, are the one who got phished, not hotmail itself.

just take a look my screenshots. facebook need to login with email addresses too.

and most of normal computer users use same username and password on facebook and email accounts,

so its means hotmail login accounts also exposed.

cheers,

/mark