The Cambridge Analytica data breach also harvested people’s private Facebook messages