I'm not sure that any laws were broken. It's not like we kept the restraining order active for 16 years, and his message wasn't really harassment, more like attempted atonement. At any rate, I do wish companies had to be held to their own site rules, legally. If Pystar break's Apple's TOS they get sued out of business, but if Facebook breaks their privacy settings they get a slap on the wrist from the FTC.
If you do decide to file please let us know. The entire situation sounds like a nightmare and I wonder how many others have faced this issue. On a more encouraging note I recently had to report a fake FB profile that was used to harass a family member and it was removed promptly, which surprised me.