Firstly, I know I've been stupid and gullible but I need advice on any action I now need to take.
I got a fake (but convincing) notification from facebook last night telling me my business page had been unpublished and I then followed a link where I had to upload a picture of my passport and change my password. My facebook then got hacked. Facebook notified me I'd been hacked and I got my account restored and changed passwords etc.
However the scammers now have a photo of my passport - the photo page with passport number etc. What should I do next? Do I go to the police in case someone steals my identity? Or contact my bank? What is the best course of action please - I don't know what I need to do and googling hasn't thrown up any practical advice. I don't want to waste police time but feel like I should report it to someone. Thanks for any advice and please don't tell me I've been gullible because I know I have!