It looks like you are providing the [thumb] shortcode with a string that is literally 'http://example.com'. I am guessing, but I think you need to loose the single quotes wrapping the URL:
<?php echo do_shortcode("[thumb]".bp_profile_field_data('field=2')."[/thumb]"); ?>
So that you only pass the URL and no extraneous characters.