A recent famous case that comes to mind is when some independent researchers found an ex-RAF terrorist on the run (or call her whatever your political inclination suits) via facial recognition of photos on social media of a capobeira club. I assume the reference material were some age old photos as she was on the run for decades.

I don't know much about facial recognition but I only heard it works damn well and considering OS and phone manufacturers employing it and are confident enough to not have their users locked out or compromise security let's me assume that it works damn well.