Start by finding out what was shared without shaming the child for making the mistake.
Personal information can include a full name, address, school, phone number, photographs, passwords, location, or identity documents.
Change passwords and review privacy settings if account information was exposed.
If an adult is contacting the child in a sexual, threatening, coercive, or exploitative way, preserve evidence and seek appropriate child-safety support.