"Facebook knew in 2015 that user data had actually been misused but continued for more than two years to describe such misuse publicly as a hypothetical risk."
The SEC said Facebook discovered the misuse in 2015 yet continued for more than two years to present user-data misuse to investors as merely hypothetical.
View Source