It's also a good idea to just not use Facebook, or at least scrub all profile details and any personal information including pictures. On a more serious note,

It's also a good idea to just not use Facebook, or at least scrub all profile details and any personal information including pictures. On a more serious note, the unusual activity started Sept 14, took then 11 days before actually determining that it was an exploit, and took then 2 days after that to actually fix the issue. 2 days might not seem like a long time, but with automation, the hackers could have gone through a lot more accounts in that time frame.