So I got locked out about 10h ago and as I saw lots of people like me on twitter then I just went to bed without verifying anything. Wake up, account unlocked without questions.
I suspect this was related to the earlier news where Obama's facebook was hacked [1]. Some junior dev at FB forgot a WHERE clause at a sql query or did something equally dumb to mitigate this.
[1] http://uk.reuters.com/article/2013/10/28/uk-usa-obama-twitte...