[mdrzn]

Someone once took control of a personal Facebook account for a friend of mine, which was connected to his Business Manager and all the campaigns he was running.

We still have no idea how that guy took control since the account had the 2FA setup, but still. No way to contact FB, no help at all, we ended up nuking the cards connected to the BM and restart his profile from scratch.

Facebook won't help you in any way.

[herbst]

That's a smart security model. No idea how they got in (maybe session stealing in a public WiFi?) But just doing the same problematic thing again.