I just recently found out that if someone changes a personal profile page into a 'fan' page then all the friends from his previous personal page will be automatically added as liking the new fan page.
I think it's good for everyone to be aware of security loopholes in FB.... they seem to be all over the place!