Facebook recently revealed that its security was breached and certain user data was left vulnerable. More details on this exploit can be found in the link below. While Techcrunch.com doesn't necessarily recommend you change your password, it would not hurt to do so to ensure account security.
Article: https://techcrunch.com/2018/09/28/everything-you-need-to-know-about-facebooks-data-breach-affecting-50m-users/
Also there is often many posts about people getting "hacked" on Facebook when in reality it's an account duplication scam. If you notice a friend invite from someone you are already friends with, you should contact them to see if they did in fact make a new account. Report duplicated accounts to Facebook through their online reporting tool, a link can be found when looking at those duplicated accounts. This is generally a hoax.
More information: https://www.sacbee.com/news/nation-world/national/article219635265.html
