https://phys.org/news/2018-06-facebook-user-companies.html

In its confirmation of the story, Facebook acknowledged the information was given to a "small number" of companies including RBC Capital Markets and Nissan Motor Co., advertisers and other business partners.

The companies had access to the data during a stretch of time in 2015 after Facebook had locked out most developers who build apps that work on its social network. Facebook gave select "whitelisted" companies extensions before they were also blocked from getting its users' personal information.