It was one data scientist at Cambridge who supplied Cambridge Analytica with the data for 50 million facebook users.

The size of the company doesn't matter. One person with an API and a database can do as much damage as a massive company.