One thing other commenters haven't mentioned is that Facebook asked the other parties to delete the data and promise never to use it again and the other parties

One thing other commenters haven't mentioned is that Facebook asked the other parties to delete the data and promise never to use it again and the other parties even certified that they had done so, but the whistleblower is alleging they lied to Facebook. Maybe that's legally actionable.