Much more importantly the least harmful thing to come from this would be FB account deletion. Chances are for most people that FB password is used somewhere els

Much more importantly the least harmful thing to come from this would be FB account deletion. Chances are for most people that FB password is used somewhere else and more harm could come from it since everything an attacker needs to know about their victim is in their FB profile. I was going to mention that in my initial comment but it seemed obvious.