Literally anyone with database access on any social media site can do that to anyone at any time (and potentially even hide it from the person that they did it to) It is why generative AI is being used to create posts on facebook that read like ads for products