Forward the dump to Facebook support so they can lock the account for suspicious activity and require the user to complete security verification... they generally do this by way of sending them ID scans or having you identify friends in pictures. Both of which are not hard to BS individually, but difficult to do in batch.