Threat actors are selling 267 million Facebook profiles for ..500 ($623) on dark web sites and hacker forums. The data does not contain Facebook account passwords, but it does contain email addresses and phone numbers for some users. This could allow attackers to create spear-phishing campaigns that aim to steal your password using email campaigns or SMS texts that pretend to be from Facebook. Cybersecurity intelligence firm Cyble has purchased the data and is adding it to their breach notification service. Cyble recommends users tighten privacy settings on Facebook accounts and be cautious of unsolicited emails and text messages.
Source: https://www.bleepingcomputer.com/news/security/267-million-facebook-profiles-sold-for-600-on-the-dark-web/