They should share it with Meta.

https://www.0xsid.com/blog/meta-account-takeover-fiasco