A Cambridge University psychology researcher, Alexandr Kogan, creates a personality quiz app that's installed by about 300,000 Facebook users. These people agree to share their data, and, thanks to the app's design and the way the Facebook platform operated at the time, they also share their Facebook friends' data. Kogan thus legitimately gains access to data about "tens of millions" people.