This is a tough situation, and people react very differently. Some believe the best move is to expose the person publicly and warn others. Others say you should stay quiet, document everything, and handle it only through legal channels. Which approach do you think is smarter—and why? Please share your reasoning (and what risks you see in the approach you didn’t choose).
I think legal is ok after you must have
Block the person on all platforms.
Change your passwords immediately.
Turn on two-factor authentication.
Check your privacy settings.
Legal first.

Legal first, you can’t take law into your hands.