If you suspect that your Facebook account has been hacked and the hacker has changed your email and password, it's important to act swiftly to regain control and safeguard your personal information. Here are the steps you can take:
1. Confirm the hack: Ensure that your account has indeed been compromised. If you are unable to log in or receive notifications that your email or password has been changed, it's highly likely that your account has been hacked. You may also notice suspicious activity on your profile, such as unauthorized posts, messages, or friend requests.
2. Report the issue: Facebook has dedicated support channels to handle hacked accounts. Visit the Facebook Help Center or its dedicated "Hacked and Fake Accounts" page to report the issue. Provide as much relevant information as possible, including details about the suspicious activity and the compromised email address, if known.
3. Recover your account: Facebook provides a process to regain access to your hacked account, even if the hacker has changed the email and password. Follow the instructions provided by Facebook's account recovery process, which often involves verifying your identity through additional information or photo identification.
4. Check for additional security breaches: Once you regain access to your account, thoroughly review your privacy and security settings. Change your password to a strong and unique one that you haven't used elsewhere, enable two-factor authentication for an added layer of security, and review the connected apps, removing any that you don't recognize or trust.
5. Update other accounts: If you used the compromised email and password combination for other online services, it is essential to change the password for those accounts as well. Using a unique and robust password for each of your online accounts minimizes the potential damage of one account being compromised.
6. Stay vigilant: After a security breach, it's crucial to remain vigilant for potential signs of further unauthorized access. Monitor your accounts regularly, enable security notifications where available, and be cautious of phishing attempts or suspicious emails that may try to trick you into divulging personal information or login credentials.
Remember, prevention is key to reducing the risk of future hacks. Use strong, unique passwords for each of your online accounts, regularly update them, and enable additional security measures like two-factor authentication whenever possible.