Update on March 17, 2018, 9:50 AM PT: The claim that this is a data breach is completely false. Aleksandr Kogan requested and gained access to information from users who chose to sign up to his app, and everyone involved gave their consent.
Six degrees of everbody.
Did I hear it right? Don't have a link, but read it here somewhere.