On the other hand, there was a way to attribute loss in stock price that happened when the news of the scandal broke. Investors have a clearer path to arguing that they were harmed, even though they are not guaranteed to win the case.
Proving damages by externalities is very hard unfortunately.
For example I remember a case where foresters around here tried to sue coal companies for the acidified rain which killed a lot of pines and saplings and cost them a lot of money.
The courts denied any compensation because they should have known acid rain was a risk and they could not prove which sulphur compound molecules originated from which company. And I suppose courts would treat misuse of personal data the same.
Of the 87 million or so individuals who were impacted[1], only 270,000 gave their consent[2]:
The first step for those filling out the questionnaire was to grant access to their Facebook profiles. Once they did, an app then harvested their data and that of their friends."
[1] https://www.nytimes.com/2018/04/04/us/politics/cambridge-ana...
[2] https://www.nytimes.com/2018/03/17/us/politics/cambridge-ana...
> Cambridge Analytica later obtained information from the app for about 50 million Facebook users, as the app also vacuumed up data on people’s friends — including those who never downloaded the app or gave explicit consent.
- https://apnews.com/article/c8f615be9523421998b4fcc16374ff37