Facebook Account Immediately hacked upon setting up AppleID...

Hello. I received a refurbished IPhone X for the holidays. Upon going through the process to set up the phone and signing in and making an Apple ID, I instantaneously received word that my Facebook account was suspended. Looking into it I received an email to change my Facebook password (that I did not request) less than a minute after setting that email address as my AppleID and it said it was from the IPhone X iOS that this request was suddenly made.

My account is currently suspended now and pending investigation, and I'm struggling to understand how this was even possible. The phone was purchased refurbished from a reputable source through Amazon. And as far as I am aware it came full factory reset.

If any help can be given it would be much appreciated.