I have become a victim to the same hacking theft and have been told by PayPal that the payments were authorised even though they were not. They were somehow made not even through my Facebook account, but through another account that was also connected to an official facebook page of an organisation. This should also be the responsibility of PayPal to refund this money and should fall under customer protection because the payments were NOT authorised or even preauthorised. Please see this article for additional information on this scam: https://www.cnet.com/news/your-hacked-facebook-account-may-be-bankrolling-scam-ad-campaigns/
... View more