This should be the main takeaway from this article--that Facebook relies on the honor system for protecting user data.

Breaking a company's TOS isn't a crime in and of itself, and social media data has been used for political targeting for years now. Insinuating that Trump won because of a nefarious brain control operation fueled by data from a "data breach" is irresponsible.

Facebook gives companies access to the data (e.g., "for research") but they're not allowed to sell or provide that data to third parties (which is what these people did).