I was shocked at the Cambridge story because I thought everybody already knew that hundreds of thousands of 3rd parties had full access to that sort of data, with the only protection being Facebook had a policy that you weren't supposed to make a copy & pass it around.