As part of cleaning this mess up you need to also institute an inviolable policy that you will never edit a user's profile without the user's permission unless legally required to. If there is something in a profile that you cannot allow to remain on your site then you should delete the profile content. If you want to name and shame spammers it should be done somewhere other than the profile.

This is important because it never occurs to most users that you might edit their profile, and so it never occurs to them that you might edit other users' profiles. Thus, when people see something on someone else's profile they assume the person put it there.