I'll try to make this brief. Heard a talk by the FBI.
========
Treasurer for a mid-size business (Treas) with a $250,000 payroll but not much security goes on a canoe trip with buddies. There's a new guy, George. This is all on Facebook. A crook has selected Treas's company to steal from, and he's reading all about the canoe trip.

After the trip, Treas gets an e-mail from George (But not really. George is innocent.) Fake george says "here's a video I made of our canoe trip." Treas clicks the link. It doesn't bring up the video, but Treas shrugs it off. Actually it's software which sticks in Treas's computer, and when it's time to pay the employees, the software transfers the $250,000 to the crook's account instead.

While the money is being transferred, Treas' bank's software puts up boxes saying "Contact your bank," but Treas mutters "Goddam Microsoft" and exits instead. In a few minutes it's too late.
================
And that is an example of why it's not good to put too much stuff on Facebook.