I would email Facebook and tell them you have this info and you would like to work with them and would like to be credited when they announce the fix. Most comp

I would email Facebook and tell them you have this info and you would like to work with them and would like to be credited when they announce the fix. Most companies will give you credit, where it's due. Also, companies of their size ought to have a dedicated security email address. Not sure what the legal status of selling this info is, without going into the morality of do that.