The case dates back to 2018, after it emerged that data from millions of users was accessed by a now-defunct political consulting firm.