Mainstream media seems content to call the whole Cambridge Analytica thing a "data breach." It wasn't. Although they violated Facebook's terms of service, there was no breach. They had full and "legitimate" access to all of the data. They used it in a way that breached the TOS, but they didn't get the data itself through illegitimate means. This is how Facebook works. This is by design.