The firms included Israeli-based Cobwebs Technologies, Cognyte, Black Cube and Bluehawk CI.
Given the severity of their violations, we have banned them from our services," the report said.
The social media company said it alerted roughly 50,000 people it believes were targeted.
Facebook then recommends that users go through their privacy and security tweaks to check that their accounts are secure.
The company said law enforcement groups can submit lawful requests for information from the platform.
CNET reached out to the companies cited in the report.
An email to Cytrox bounced back.
