Facebook hacking laws?

My friend's Facebook was hacked today. I want to know if he should go to the police; they also altered his e-mail pword and used his Steam account. I do not know if anything was purchased with this information. Is slander a criminal offense? And what do we do, because we have no idea who it was? And he already reported it to Facebook.