The Consumer Financial Protection Bureau (CFPB) has notified Meta it may take “legal action” over potential misuse of individuals’ financial data from third parties.