The Cambridge Analytica scandal affected nearly 40 million more people than we thought