Facebook knew Cambridge Analytica was misusing users’ data three years ago and only banned the company this week