If people have deleted their Facebook accounts, they wouldn't have any ability to be notified, in all likelihood.
If a company cared more about users than its share price, and it learned about a breach in 2016, wouldn't it have notified its users in 2016?