Your private Facebook statuses aren’t as private as you thought — when it comes to Storify.

A vulnerability in the popular online content-curation platform allows individuals to pull and publish statuses from any Facebook account or group regardless of privacy setting.

The first to notice this was Julie Pippet, a communications and public relations professional who stumbled into the privacy breach by accident. Using the Storify extension for the Google Chrome browser, which helpfully adds a Storify button to Facebook and other social Web pages, Pippet was able to add a friend’s Facebook status about Superstorm Sandy into her public Storify feed.