Kung naka bind yang email mo sa Facebook, pwede nilang idump (basta naka friend sayo yung dumper) yan para makita email mo kahit naka set sa Only Me, then mag send sila ng mail messages sayo. Just disregard lang then kung pwede, ireport mo. Start mo na rin isecure account mo by adding additional security like 2FA tsaka update mo lahat ng details mo, mobile numbers, etc.