There were a lot of people in the data set, certainly, but how many can quantify damages?
If anything the Cambridge Analytica scandal was (disturbing) "win" for privacy loss: a lot of the Cambridge Analytica demographics markers were baked into the Facebook ad platform and became standard ad demographics soon after. The Cambridge Analytica scandal as played out looked like Facebook was stamping out bad privacy practices using its platform, but the real message was Facebook eliminating a competitor to their ad business by eliminating their access to Facebook's data. Lucky for Facebook the PR mostly stuck with the face value of "stamping out bad privacy practices", but even a lot of the people that saw/realized it was simply Facebook eliminating a competitor have mostly shrugged and continued to use Facebook (though Facebook did add some opt-outs at that much more modest uproar, versus all the loud thundering noise Cambridge Analytica got).