This story was updated at 11:51 p.m.
Mark Zuckerberg, cofounder and CEO of Facebook, doesn’t yet have a clear answer on whether there are any other companies, like data analysis firm Cambridge Analytica, that may have improper access to tens of millions of Facebook users’ data.
In a Facebook post Thursday afternoon, Zuckerberg finally spoke out on the growing controversy. Though he detailed changes already made to prevent similar data access mishaps and more preventative measures to come, he hinted that Cambridge Analytica may be just the tip of the iceberg.
“First, we will investigate all apps that had access to large amounts of information before we changed our platform to dramatically reduce data access in 2014, and we will conduct a full audit of any app with suspicious activity,” he said.
Zuckerberg was asked about this during his interview with CNN Wednesday evening.
“How do you know there aren’t hundreds more companies like Cambridge Analytica that are also keeping data that violates Facebook’s policies?” asked CNN’s Laurie Segall on “Anderson Cooper 360.”
Zuckerberg’s response was to say “the question here is are our app developers, who people have given access to their data, are they doing something that people don’t want? Are they selling the data in a way that people don’t want, or are they giving it to someone that they don’t have authorization to do?”
He added that this is something Facebook needs to figure out.
Segall again pressed him on the scope of what he expects to find, referring to the 50 millions Facebook users, whose data was allegedly compromised in the Cambridge Analytica controversy.
“Um, well, it’s hard to know what we’ll find,” Zuckerberg replied. “We’re going to review thousands of apps. So this is going to be an intensive process, but this is important.”
He pledged that Facebook, after taking Cambridge Analytica at its word that it certified that it deleted all the improperly obtained data, would never make that mistake again.
Meanwhile Cambridge Analytica maintains it has not done anything improper with any Facebook data.

