Cloning profiles is what seems likely wrong to me but I'm not sure how that being done via scraping or not should matter.

With cloned profiles (or any data obtained and shared without your consent) it will be harder for you to exercise your right to be forgotten, for example.