That's a consequence of growth they should have thought of and a basic part of running any business.
At least in the US Attorneys General are being forced to do this work for them. It's essentially the only way to get a hacked Facebook/Instagram account recovered.
https://www.engadget.com/41-state-attorneys-general-tell-met...