What's scary is that Cambridge Analytica is probably only one of hundreds, maybe thousands, of companies that had access to this type of data from Facebook. This is just the one we know about.
> A research company (GSR) licensed the data to us, which they legally obtained via a tool provided by Facebook. Hundreds of data firms have utilized Facebook data in a similar fashion.
[1] https://ca-commercial.com/news/time-facts-not-conjecture-say...
Considering we were a tiny defense contractor who didn't get a ton of contracts, I have to assume this happened in some way or form.