- Change all exposed passwords;
- Contact the company or organization that was being spoofed (Facebook, in this case);
- Alert it that your personal information was exposed;
- Ask it to cancel any accounts affected (Note: We don’t recommend this for Facebook, obviously, but view it more as a general tip); and
- If the information provided can be used to access other institutions, such as credit-card companies, contact them, as well.
