This was the response from one of their User Operations staff:
Thanks for writing into us. It is possible that your friend’s account has been compromised. We would like to investigate this issue further, but unfortunately, we cannot release information regarding a user’s account to anyone but the account holder. Please tell your friend to contact us directly at privacy from his or her login email address with a brief description of the problem. We apologize for any inconvenience. Let me know if you have any further questions.
Is this response sufficient, no. Only time will tell if Facebook is able to repel spammers from the posting absurd free ringtone offers.