Comment by joatmon-snoo

That's called a compromised account, not Facebook sharing the email with a third party data broker.